Protect yourself against future threats.
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
===========================================================================
AUSCERT External Security Bulletin Redistribution
ESB-2019.3318
Multiple vulnerabilities have been identified in libav
3 September 2019
===========================================================================
AusCERT Security Bulletin Summary
---------------------------------
Product: libav
Publisher: Debian
Operating System: Debian GNU/Linux 8
Windows
UNIX variants (UNIX, Linux, OSX)
Impact/Access: Denial of Service -- Remote/Unauthenticated
Resolution: Patch/Upgrade
CVE Names: CVE-2019-14442 CVE-2019-14372 CVE-2018-11102
CVE-2018-5766 CVE-2017-9987
Original Bulletin:
https://security-tracker.debian.org/tracker/DLA-1907-1
Comment: This advisory references vulnerabilities in products which run on
platforms other than Debian. It is recommended that administrators
running libav check for an updated version of the software for their
operating system.
- --------------------------BEGIN INCLUDED TEXT--------------------
- --6kzmhpbacddcoxcl
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
Package : libav
Version : 6:11.12-1~deb8u8
CVE ID : CVE-2017-9987 CVE-2018-5766 CVE-2018-11102 CVE-2019-14372
CVE-2019-14442
Several security issues have been corrected in multiple demuxers and
decoders of the libav multimedia library.
CVE-2017-9987
In Libav, there was a heap-based buffer overflow in the function
hpel_motion in mpegvideo_motion.c. A crafted input could have lead to
a remote denial of service attack.
CVE-2018-5766
In Libav there was an invalid memcpy in the av_packet_ref function of
libavcodec/avpacket.c. Remote attackers could have leveraged this
vulnerability to cause a denial of service (segmentation fault) via a
crafted avi file.
CVE-2018-11102
A read access violation in the mov_probe function in
libavformat/mov.c allowed remote attackers to cause a denial of
service (application crash), as demonstrated by avconv.
CVE-2019-14372
In Libav, there was an infinite loop in the function
wv_read_block_header() in the file wvdec.c.
CVE-2019-14442
In mpc8_read_header in libavformat/mpc8.c, an input file could have
resulted in an avio_seek infinite loop and hang, with 100% CPU
consumption. Attackers could have leveraged this vulnerability to
cause a denial of service via a crafted file.
For Debian 8 "Jessie", these problems have been fixed in version
6:11.12-1~deb8u8.
We recommend that you upgrade your libav packages.
Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS
- --=20
mike gabriel aka sunweaver (Debian Developer)
fon: +49 (1520) 1976 148
GnuPG Fingerprint: 9BFB AEE8 6C0A A5FF BF22 0782 9AF4 6B30 2577 1B31
mail: sunweaver@debian.org, http://sunweavers.net
- --6kzmhpbacddcoxcl
Content-Type: application/pgp-signature; name="signature.asc"
- -----BEGIN PGP SIGNATURE-----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=x/3S
- -----END PGP SIGNATURE-----
- --6kzmhpbacddcoxcl--
- --------------------------END INCLUDED TEXT--------------------
You have received this e-mail bulletin as a result of your organisation's
registration with AusCERT. The mailing list you are subscribed to is
maintained within your organisation, so if you do not wish to continue
receiving these bulletins you should contact your local IT manager. If
you do not know who that is, please send an email to auscert@auscert.org.au
and we will forward your request to the appropriate person.
NOTE: Third Party Rights
This security bulletin is provided as a service to AusCERT's members. As
AusCERT did not write the document quoted above, AusCERT has had no control
over its content. The decision to follow or act on information or advice
contained in this security bulletin is the responsibility of each user or
organisation, and should be considered in accordance with your organisation's
site policies and procedures. AusCERT takes no responsibility for consequences
which may arise from following or acting on information or advice contained in
this security bulletin.
NOTE: This is only the original release of the security bulletin. It may
not be updated when updates to the original are made. If downloading at
a later date, it is recommended that the bulletin is retrieved directly
from the author's website to ensure that the information is still current.
Contact information for the authors of the original document is included
in the Security Bulletin above. If you have any questions or need further
information, please contact them directly.
Previous advisories and external security bulletins can be retrieved from:
https://www.auscert.org.au/bulletins/
===========================================================================
Australian Computer Emergency Response Team
The University of Queensland
Brisbane
Qld 4072
Internet Email: auscert@auscert.org.au
Facsimile: (07) 3365 7031
Telephone: (07) 3365 4417 (International: +61 7 3365 4417)
AusCERT personnel answer during Queensland business hours
which are GMT+10:00 (AEST).
On call after hours for member emergencies only.
===========================================================================
-----BEGIN PGP SIGNATURE-----
Comment: http://www.auscert.org.au/render.html?it=1967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=R9k3
-----END PGP SIGNATURE-----