Heap-based buffer overflow in the xwd_decode_frame function in libavcodec/xwddec.c in FFmpeg before 2.8.12, 3.0.x before 3.0.8, 3.1.x before 3.1.8, 3.2.x before 3.2.5, and 3.3.x before 3.3.1 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted file.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Heap-based buffer overflow in the xwd_decode_frame function in libavcodec/xwddec.c in FFmpeg before     2.8.12, 3.0.x before 3.0.8, 3.1.x before 3.1.8, 3.2.x before 3.2.5, and 3.3.x before 3.3.1 allows remote     attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a     crafted file. (CVE-2017-9991)

Note that Nessus relies on the presence of the package as reported by the vendor.

There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  - Heap-based buffer overflow in the xwd_decode_frame function in libavcodec/xwddec.c in FFmpeg before
    2.8.12, 3.0.x before 3.0.8, 3.1.x before 3.1.8, 3.2.x before 3.2.5, and 3.3.x before 3.3.1 allows remote
    attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a
    crafted file. (CVE-2017-9991)

  - Heap-based buffer overflow in the decode_dds1 function in libavcodec/dfa.c in FFmpeg before 2.8.12, 3.0.x
    before 3.0.8, 3.1.x before 3.1.8, 3.2.x before 3.2.5, and 3.3.x before 3.3.1 allows remote attackers to
    cause a denial of service (application crash) or possibly have unspecified other impact via a crafted
    file. (CVE-2017-9992)

  - libavcodec/webp.c in FFmpeg before 2.8.12, 3.0.x before 3.0.8, 3.1.x before 3.1.8, 3.2.x before 3.2.5, and
    3.3.x before 3.3.1 does not ensure that pix_fmt is set, which allows remote attackers to cause a denial of
    service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a
    crafted file, related to the vp8_decode_mb_row_no_filter and pred8x8_128_dc_8_c functions. (CVE-2017-9994)

  - The cdxl_decode_frame function in libavcodec/cdxl.c in FFmpeg 2.8.x before 2.8.12, 3.0.x before 3.0.8,
    3.1.x before 3.1.8, 3.2.x before 3.2.5, and 3.3.x before 3.3.1 does not exclude the CHUNKY format, which
    allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or
    possibly have unspecified other impact via a crafted file. (CVE-2017-9996)

ID	Name	Product	Family	Severity
258500	Linux Distros Unpatched Vulnerability : CVE-2017-9991	Nessus	Misc.	high
404298	Alpine: multiple ffmpeg packages: security update to 3.2.5-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	high
404298	Alpine: multiple ffmpeg packages: security update to 3.2.5-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	high
404295	Alpine: multiple ffmpeg packages: security update to 3.1.8-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	high
404295	Alpine: multiple ffmpeg packages: security update to 3.1.8-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	high

Detections

Analytics

CVE-2017-9991

high

Tenable Plugins

high

high

high

high

high