Libav CVE-2017-16803 Denial of Service Vulnerability

Bugtraq ID:	101882
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2017-16803
Remote:	Yes
Local:	No
Published:	Nov 13 2017 12:00AM
Updated:	Dec 19 2017 10:37PM
Credit:	hackyzh.
Vulnerable:	Libav Libav 12.1 Libav Libav 12.0 Libav Libav 11.9 Libav Libav 11.8 Libav Libav 11.7 Libav Libav 11.5 Libav Libav 11.4 Libav Libav 11.3
Not Vulnerable:

Libav CVE-2017-16803 Denial of Service Vulnerability

Libav is prone to a denial-of-service vulnerability.

An attacker can exploit this issue to cause denial-of-service conditions.

Libav through 11.11 and 12.x through 12.1 is vulnerable.

Libav CVE-2017-16803 Denial of Service Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Libav CVE-2017-16803 Denial of Service Vulnerability

References:

• Libav Homepage (Libav)
  
• Bug 1098 - (CVE-2017-16803) crafted Smacker stream causes an OOB access in bitst (Libav)
  
• smacker: add sanity check for length in smacker_decode_tree() (Github)