CVE-2019-14442

Published: 30 July 2019

In mpc8_read_header in libavformat/mpc8.c in Libav 12.3, an input file can result in an avio_seek infinite loop and hang, with 100% CPU consumption. Attackers could leverage this vulnerability to cause a denial of service via a crafted file.

Priority

CVSS 3 base score: 6.5

Status

Package	Release	Status
libav Launchpad, Ubuntu, Debian	bionic	Does not exist
	disco	Does not exist
	precise	Does not exist
	trusty	Does not exist
	upstream	Needs triage
	xenial	Does not exist

References

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14442
https://bugzilla.libav.org/show_bug.cgi?id=1159
NVD
Launchpad
Debian

Bugs

Join the discussion

Ubuntu security updates mailing list
Security announcements mailing list

Canonical is offering Extended Security Maintenance

Canonical is offering Ubuntu Extended Security Maintenance (ESM) for security fixes and essential packages.

Find out more about ESM ›