The svg_probe function in libavformat/img2dec.c in FFmpeg through 3.4.2 allows remote attackers to cause a denial of service (Infinite Loop) via a crafted XML file.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - The svg_probe function in libavformat/img2dec.c in FFmpeg through 3.4.2 allows remote attackers to cause a     denial of service (Infinite Loop) via a crafted XML file. (CVE-2018-7751)

Note that Nessus relies on the presence of the package as reported by the vendor.

There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  - In FFmpeg 4.0.1, improper handling of frame types (other than EAC3_FRAME_TYPE_INDEPENDENT) that have
    multiple independent substreams in the handle_eac3 function in libavformat/movenc.c may trigger an out-of-
    array access while converting a crafted AVI file to MPEG4, leading to a denial of service or possibly
    unspecified other impact. (CVE-2018-13302)

  - The decode_init function in libavcodec/utvideodec.c in FFmpeg 2.8 through 3.4.2 allows remote attackers to
    cause a denial of service (Out of array read) via an AVI file with crafted dimensions within chroma
    subsampling data. (CVE-2018-7557)

  - The svg_probe function in libavformat/img2dec.c in FFmpeg through 3.4.2 allows remote attackers to cause a
    denial of service (Infinite Loop) via a crafted XML file. (CVE-2018-7751)

  - The decode_init function in libavcodec/utvideodec.c in FFmpeg through 3.4.2 allows remote attackers to
    cause a denial of service (out of array read) via an AVI file. (CVE-2018-10001)

  - An improper integer type in the mpeg4_encode_gop_header function in libavcodec/mpeg4videoenc.c in FFmpeg
    2.8 and 4.0 may trigger an assertion violation while converting a crafted AVI file to MPEG4, leading to a
    denial of service. (CVE-2018-12458)

The remote host is affected by the vulnerability described in GLSA-202003-65 (FFmpeg: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in FFmpeg. Please review       the CVE identifiers referenced below for details.
  Impact :

    A remote attacker could entice a user or automated system using FFmpeg       to process a specially crafted file, resulting in the execution of       arbitrary code or a Denial of Service.
  Workaround :

    There is no known workaround at this time.

ID	Name	Product	Family	Severity
254701	Linux Distros Unpatched Vulnerability : CVE-2018-7751	Nessus	Misc.	medium
426309	Alpine: ffmpeg4: security update to 3.4.3-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	high
426309	Alpine: ffmpeg4: security update to 3.4.3-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	high
404304	Alpine: multiple ffmpeg packages: security update to 3.4.3-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	high
404304	Alpine: multiple ffmpeg packages: security update to 3.4.3-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	high
135020	GLSA-202003-65 : FFmpeg: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	critical

Detections

Analytics

CVE-2018-7751

medium

Tenable Plugins

medium

high

high

high

high

critical