Gentoo update for Libav

1) Resource management error

EUVDB-ID: #VU42276

Risk: Medium

CVSSv4.0: 2.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2011-3934

CWE-ID: CWE-399 - Resource Management Errors

Exploit availability: No

Description

The vulnerability allows a remote non-authenticated attacker to read and manipulate data.

Double free vulnerability in the vp3_update_thread_context function in libavcodec/vp3.c in FFmpeg before 0.10 allows remote attackers to have an unspecified impact via crafted vp3 data.

Mitigation

Update the affected packages.
media-video/libav to version: 9.17

Vulnerable software versions

Gentoo Linux: All versions

media-video/libav: before 9.17

CPE2.3

• cpe:2.3:o:gentoo:gentoo_linux:*:*:*:*:*:*:*:*
• cpe:2.3:a:gentoo:media-video_libav:*:*:*:*:*:gentoo_linux:*:*

External links

https://security.gentoo.org/glsa/201502-08

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

2) Input validation error

EUVDB-ID: #VU42275

Risk: Medium

CVSSv4.0: 2.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2011-3935

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

Description

The vulnerability allows a remote non-authenticated attacker to read and manipulate data.

The codec_get_buffer function in ffmpeg.c in FFmpeg before 0.10 allows remote attackers to have an unspecified impact via vectors related to a crafted image size.

Mitigation

Update the affected packages.
media-video/libav to version: 9.17

Vulnerable software versions

Gentoo Linux: All versions

media-video/libav: before 9.17

CPE2.3

• cpe:2.3:o:gentoo:gentoo_linux:*:*:*:*:*:*:*:*
• cpe:2.3:a:gentoo:media-video_libav:*:*:*:*:*:gentoo_linux:*:*

External links

https://security.gentoo.org/glsa/201502-08

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

3) Resource management error

EUVDB-ID: #VU42272

Risk: Medium

CVSSv4.0: 2.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2011-3946

CWE-ID: CWE-399 - Resource Management Errors

Exploit availability: No

Description

The vulnerability allows a remote non-authenticated attacker to read and manipulate data.

The ff_h264_decode_sei function in libavcodec/h264_sei.c in FFmpeg before 0.10 allows remote attackers to have an unspecified impact via crafted Supplemental enhancement information (SEI) data, which triggers an infinite loop.

Mitigation

Update the affected packages.
media-video/libav to version: 9.17

Vulnerable software versions

Gentoo Linux: All versions

media-video/libav: before 9.17

CPE2.3

• cpe:2.3:o:gentoo:gentoo_linux:*:*:*:*:*:*:*:*
• cpe:2.3:a:gentoo:media-video_libav:*:*:*:*:*:gentoo_linux:*:*

External links

https://security.gentoo.org/glsa/201502-08

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

4) Buffer overflow

EUVDB-ID: #VU42283

Risk: High

CVSSv4.0: 8.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Amber]

CVE-ID: CVE-2013-0848

CWE-ID: CWE-119 - Memory corruption

Exploit availability: No

Description

The vulnerability allows a remote non-authenticated attacker to execute arbitrary code.

The decode_init function in libavcodec/huffyuv.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via a crafted width in huffyuv data with the predictor set to median and the colorspace set to YUV422P, which triggers an out-of-bounds array access.

Mitigation

Update the affected packages.
media-video/libav to version: 9.17

Vulnerable software versions

Gentoo Linux: All versions

media-video/libav: before 9.17

CPE2.3

• cpe:2.3:o:gentoo:gentoo_linux:*:*:*:*:*:*:*:*
• cpe:2.3:a:gentoo:media-video_libav:*:*:*:*:*:gentoo_linux:*:*

External links

https://security.gentoo.org/glsa/201502-08

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

5) Buffer overflow

EUVDB-ID: #VU42286

Risk: High

CVSSv4.0: 8.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Amber]

CVE-ID: CVE-2013-0851

CWE-ID: CWE-119 - Memory corruption

Exploit availability: No

Description

The vulnerability allows a remote non-authenticated attacker to execute arbitrary code.

The decode_frame function in libavcodec/eamad.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via crafted Electronic Arts Madcow video data, which triggers an out-of-bounds array access.

Mitigation

Update the affected packages.
media-video/libav to version: 9.17

Vulnerable software versions

Gentoo Linux: All versions

media-video/libav: before 9.17

CPE2.3

• cpe:2.3:o:gentoo:gentoo_linux:*:*:*:*:*:*:*:*
• cpe:2.3:a:gentoo:media-video_libav:*:*:*:*:*:gentoo_linux:*:*

External links

https://security.gentoo.org/glsa/201502-08

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

6) Buffer overflow

EUVDB-ID: #VU42287

Risk: High

CVSSv4.0: 8.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Amber]

CVE-ID: CVE-2013-0852

CWE-ID: CWE-119 - Memory corruption

Exploit availability: No

Description

The vulnerability allows a remote non-authenticated attacker to execute arbitrary code.

The parse_picture_segment function in libavcodec/pgssubdec.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via crafted RLE data, which triggers an out-of-bounds array access.

Mitigation

Update the affected packages.
media-video/libav to version: 9.17

Vulnerable software versions

Gentoo Linux: All versions

media-video/libav: before 9.17

CPE2.3

• cpe:2.3:o:gentoo:gentoo_linux:*:*:*:*:*:*:*:*
• cpe:2.3:a:gentoo:media-video_libav:*:*:*:*:*:gentoo_linux:*:*

External links

https://security.gentoo.org/glsa/201502-08

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

7) NULL pointer dereference

EUVDB-ID: #VU42317

Risk: Medium

CVSSv4.0: 2.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2013-0860

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

Description

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a NULL pointer dereference error. A remote attacker can trigger denial of service conditions via crafted picture data.

Mitigation

Update the affected packages.
media-video/libav to version: 9.17

Vulnerable software versions

Gentoo Linux: All versions

media-video/libav: before 9.17

CPE2.3

• cpe:2.3:o:gentoo:gentoo_linux:*:*:*:*:*:*:*:*
• cpe:2.3:a:gentoo:media-video_libav:*:*:*:*:*:gentoo_linux:*:*

External links

https://security.gentoo.org/glsa/201502-08

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

8) Buffer overflow

EUVDB-ID: #VU42325

Risk: High

CVSSv4.0: 8.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Amber]

CVE-ID: CVE-2013-0868

CWE-ID: CWE-119 - Memory corruption

Exploit availability: No

Description

The vulnerability allows a remote non-authenticated attacker to execute arbitrary code.

libavcodec/huffyuvdec.c in FFmpeg before 1.1.2 allows remote attackers to have an unspecified impact via crafted Huffyuv data, related to an out-of-bounds write and (1) unchecked return codes from the init_vlc function and (2) "len==0 cases."

Mitigation

Update the affected packages.
media-video/libav to version: 9.17

Vulnerable software versions

Gentoo Linux: All versions

media-video/libav: before 9.17

CPE2.3

• cpe:2.3:o:gentoo:gentoo_linux:*:*:*:*:*:*:*:*
• cpe:2.3:a:gentoo:media-video_libav:*:*:*:*:*:gentoo_linux:*:*

External links

https://security.gentoo.org/glsa/201502-08

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

9) Input validation error

EUVDB-ID: #VU110606

Risk: Medium

CVSSv4.0: 2.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2013-3672

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

Description

The vulnerability allows a remote non-authenticated attacker to perform service disruption.

The mm_decode_inter function in mmvideo.c in libavcodec in FFmpeg before 1.2.1 does not validate the relationship between a horizontal coordinate and a width value, which allows remote attackers to cause a denial of service (out-of-bounds array access and application crash) via crafted American Laser Games (ALG) MM Video data.

Mitigation

Update the affected packages.
media-video/libav to version: 9.17

Vulnerable software versions

Gentoo Linux: All versions

media-video/libav: before 9.17

CPE2.3

• cpe:2.3:o:gentoo:gentoo_linux:*:*:*:*:*:*:*:*
• cpe:2.3:a:gentoo:media-video_libav:*:*:*:*:*:gentoo_linux:*:*

External links

https://security.gentoo.org/glsa/201502-08

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

10) Input validation error

EUVDB-ID: #VU110604

Risk: Medium

CVSSv4.0: 2.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2013-3674

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

Description

The vulnerability allows a remote non-authenticated attacker to perform service disruption.

The cdg_decode_frame function in cdgraphics.c in libavcodec in FFmpeg before 1.2.1 does not validate the presence of non-header data in a buffer, which allows remote attackers to cause a denial of service (out-of-bounds array access and application crash) via crafted CD Graphics Video data.

Mitigation

Update the affected packages.
media-video/libav to version: 9.17

Vulnerable software versions

Gentoo Linux: All versions

media-video/libav: before 9.17

CPE2.3

• cpe:2.3:o:gentoo:gentoo_linux:*:*:*:*:*:*:*:*
• cpe:2.3:a:gentoo:media-video_libav:*:*:*:*:*:gentoo_linux:*:*

External links

https://security.gentoo.org/glsa/201502-08

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

11) Integer overflow

EUVDB-ID: #VU32518

Risk: High

CVSSv4.0: 6.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Amber]

CVE-ID: CVE-2014-4609

CWE-ID: CWE-190 - Integer overflow

Exploit availability: No

Description

The vulnerability allows a remote non-authenticated attacker to execute arbitrary code.

Integer overflow in the get_len function in libavutil/lzo.c in Libav before 0.8.13, 9.x before 9.14, and 10.x before 10.2 allows remote attackers to execute arbitrary code via a crafted Literal Run.

Mitigation

Update the affected packages.
media-video/libav to version: 9.17

Vulnerable software versions

Gentoo Linux: All versions

media-video/libav: before 9.17

CPE2.3

• cpe:2.3:o:gentoo:gentoo_linux:*:*:*:*:*:*:*:*
• cpe:2.3:a:gentoo:media-video_libav:*:*:*:*:*:gentoo_linux:*:*

External links

https://security.gentoo.org/glsa/201502-08

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.