The ff_amf_get_field_value function in libavformat/rtmppkt.c in FFmpeg 3.3.2 allows remote RTMP servers to cause a denial of service (Segmentation Violation and application crash) via a crafted stream.

There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  - Integer overflow in the ape_decode_frame function in libavcodec/apedec.c in FFmpeg 2.4 through 3.3.2
    allows remote attackers to cause a denial of service (out-of-array access and application crash) or
    possibly have unspecified other impact via a crafted APE file. (CVE-2017-11399)

  - The ff_amf_get_field_value function in libavformat/rtmppkt.c in FFmpeg 3.3.2 allows remote RTMP servers to
    cause a denial of service (Segmentation Violation and application crash) via a crafted stream.
    (CVE-2017-11665)

  - The dnxhd_decode_header function in libavcodec/dnxhddec.c in FFmpeg 3.0 through 3.3.2 allows remote
    attackers to cause a denial of service (out-of-array access) or possibly have unspecified other impact via
    a crafted DNxHD file. (CVE-2017-11719)

Several vulnerabilities have been discovered in FFmpeg, a multimedia player, server and encoder. These issues could lead to Denial-of-Service and, in some situation, the execution of arbitrary code.

  - CVE-2017-9608     Yihan Lian of Qihoo 360 GearTeam discovered a NULL     pointer access when parsing a crafted MOV file.

  - CVE-2017-9993     Thierry Foucu discovered that it was possible to leak     information from files and symlinks ending in common     multimedia extensions, using the HTTP Live Streaming.

  - CVE-2017-11399     Liu Bingchang of IIE discovered an integer overflow in     the APE decoder that can be triggered by a crafted APE     file.

  - CVE-2017-11665     JunDong Xie of Ant-financial Light-Year Security Lab     discovered that an attacker able to craft a RTMP stream     can crash FFmpeg.

  - CVE-2017-11719     Liu Bingchang of IIE discovered an out-of-bound access     that can be triggered by a crafted DNxHD file.

ID	Name	Product	Family	Severity
404300	Alpine: multiple ffmpeg packages: security update to 3.2.7-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	high
404300	Alpine: multiple ffmpeg packages: security update to 3.2.7-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	high
404291	Alpine: multiple ffmpeg packages: security update to 3.1.10-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	high
404291	Alpine: multiple ffmpeg packages: security update to 3.1.10-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	high
102807	Debian DSA-3957-1 : ffmpeg - security update	Nessus	Debian Local Security Checks	high

Detections

Analytics

CVE-2017-11665

high

Tenable Plugins

high

high

high

high

high