Bug 1058020 – VUL-0: CVE-2017-14222: ffmpeg: DoS in read_tfra() due to lack of an EOF check

Bug 1058020 - (CVE-2017-14222) VUL-0: CVE-2017-14222: ffmpeg: DoS in read_tfra() due to lack of an EOF check

(CVE-2017-14222)
Summary:	VUL-0: CVE-2017-14222: ffmpeg: DoS in read_tfra() due to lack of an EOF check

Status:	RESOLVED FIXED

Classification:	openSUSE
Product:	openSUSE Distribution
Classification:	openSUSE
Component:	Security
Version:	Leap 42.2
Hardware:	Other Other

Priority:	P3 - Medium Severity: Normal (vote)
Target Milestone:	---
Assigned To:	Security Team bot
QA Contact:	E-mail List

URL:
Whiteboard:
Keywords:

Depends on:
Blocks:
	Show dependency tree / graph

Create test case

Clone This Bug

Reported:	2017-09-11 07:15 UTC by Alexander Bergmann
Modified:	2021-09-11 02:37 UTC (History)
CC List:	1 user (show)

See Also:
Found By:	Security Response Team
Services Priority:
Business Priority:
Blocker:	---
Marketing QA Status:	---
IT Deployment:	---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Alexander Bergmann 2017-09-11 07:15:32 UTC

CVE-2017-14222

In libavformat/mov.c in FFmpeg 3.3.3, a DoS in read_tfra() due to lack of an EOF
(End of File) check might cause huge CPU and memory consumption. When a crafted
MOV file, which claims a large "item_count" field in the header but does not
contain sufficient backing data, is provided, the loop would consume huge CPU
and memory resources, since there is no EOF check inside the loop.

Upstream fix:
https://github.com/FFmpeg/FFmpeg/commit/9cb4eb772839c5e1de2855d126bf74ff16d13382

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-14222
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14222

Comment 1 Bernhard Wiedemann 2017-09-12 16:01:50 UTC

This is an autogenerated message for OBS integration:
This bug (1058020) was mentioned in
https://build.opensuse.org/request/show/523752 42.2 / ffmpeg+ffmpeg2

Comment 2 Andreas Stieger 2017-09-15 18:36:41 UTC

releasing for Leap 42.2, 42.3

Comment 3 Swamp Workflow Management 2017-09-15 22:12:29 UTC

openSUSE-SU-2017:2501-1: An update that solves 13 vulnerabilities and has two fixes is now available.

Category: security (moderate)
Bug References: 1041794,1046211,1049095,1056760,1056761,1056762,1056763,1056765,1056766,1057536,1057537,1057539,1058018,1058019,1058020
CVE References: CVE-2017-11399,CVE-2017-14054,CVE-2017-14055,CVE-2017-14056,CVE-2017-14057,CVE-2017-14058,CVE-2017-14059,CVE-2017-14169,CVE-2017-14170,CVE-2017-14171,CVE-2017-14222,CVE-2017-14223,CVE-2017-14225
Sources used:
openSUSE Leap 42.2 (src):    ffmpeg-3.3.4-6.16.1, ffmpeg2-2.8.13-25.10.1, lame-3.99.5-2.1, twolame-0.3.13-2.1

Comment 4 Swamp Workflow Management 2017-09-15 22:16:08 UTC

openSUSE-SU-2017:2502-1: An update that solves 20 vulnerabilities and has one errata is now available.

Category: security (important)
Bug References: 1015120,1022920,1022921,1022922,1034176,1034177,1034179,1046211,1049095,1056760,1056761,1056762,1056763,1056765,1056766,1057536,1057537,1057539,1058018,1058019,1058020
CVE References: CVE-2016-10190,CVE-2016-10191,CVE-2016-10192,CVE-2016-9561,CVE-2017-11399,CVE-2017-14054,CVE-2017-14055,CVE-2017-14056,CVE-2017-14057,CVE-2017-14058,CVE-2017-14059,CVE-2017-14169,CVE-2017-14170,CVE-2017-14171,CVE-2017-14222,CVE-2017-14223,CVE-2017-14225,CVE-2017-7863,CVE-2017-7865,CVE-2017-7866
Sources used:
openSUSE Leap 42.3 (src):    ffmpeg-3.3.4-7.1, ffmpeg2-2.8.13-32.1, lame-3.99.5-2.1, twolame-0.3.13-2.1

Comment 5 Swamp Workflow Management 2018-07-18 14:42:01 UTC

This is an autogenerated message for OBS integration:
This bug (1058020) was mentioned in
https://build.opensuse.org/request/show/623663 15.0+42.3+Backports:SLE-12-SP2 / chromium+codec2+ffmpeg-2+ffmpeg-3+ffmpeg-4+libsodium+libvpx-1_6+zeromq