CVE-2017-14222

NameCVE-2017-14222
DescriptionIn libavformat/mov.c in FFmpeg 3.3.3, a DoS in read_tfra() due to lack of an EOF (End of File) check might cause huge CPU and memory consumption. When a crafted MOV file, which claims a large "item_count" field in the header but does not contain sufficient backing data, is provided, the loop would consume huge CPU and memory resources, since there is no EOF check inside the loop.
SourceCVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
ReferencesDSA-3996-1

Vulnerable and fixed packages

The table below lists information on source packages.

Source PackageReleaseVersionStatus
ffmpeg (PTS)bullseye (security), bullseye7:4.3.7-0+deb11u1fixed
bookworm, bookworm (security)7:5.1.6-0+deb12u1fixed
sid, trixie7:7.0.2-3fixed

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
ffmpegsourcestretch7:3.2.8-1~deb9u1DSA-3996-1
ffmpegsource(unstable)7:3.3.4-1low
libavsourcejessie(not affected)
libavsource(unstable)(unfixed)

Notes

[jessie] - libav <not-affected> (vulnerable code not present)
https://github.com/FFmpeg/FFmpeg/commit/9cb4eb772839c5e1de2855d126bf74ff16d13382

Search for package or bug name: Reporting problems