CVE-2017-14058

In FFmpeg 2.4 and 3.3.3, the read_data function in libavformat/hls.c does not restrict reload attempts for an insufficient list, which allows remote attackers…

published August 31, 2017

CVSS
—
EPSS
2%
Percentile
82.2
In the wild
Unconfirmed
What it is

In FFmpeg 2.4 and 3.3.3, the read_data function in libavformat/hls.c does not restrict reload attempts for an insufficient list, which allows remote attackers to cause a denial of service (infinite loop).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02172 · 82.2th percentile
Published
2017-08-31T15:00Z
EPSS history
Timeline
  • 31 AUG 15:00Z
    In FFmpeg 2.4 and 3.3.3, the read_data function in libavformat/hls.c does not restrict reload attempts for an insufficient list, which allows remote attackers…
    cvelistv5