CVE-2016-10191 Heap-based buffer overflow in libavformat/rtmppkt.c in FFmpeg before 2.8.10, 3.0.x before 3.0.5, 3.1.x before 3.1.6, and 3.2.x before 3.2.2 allows remote attackers to execute arbitrary code by leverag...
CriticalCVSS 9.8
EPSS 7.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Heap-based buffer overflow in libavformat/rtmppkt.c in FFmpeg before 2.8.10, 3.0.x before 3.0.5, 3.1.x before 3.1.6, and 3.2.x before 3.2.2 allows remote attackers to execute arbitrary code by leveraging failure to check for RTMP packet size mismatches.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/ffmpeg(Debian:12) | < 7:3.2.2-1 | 7:3.2.2-1 |
| debian/ffmpeg(Debian:13) | < 7:3.2.2-1 | 7:3.2.2-1 |
| debian/ffmpeg(Debian:14) | < 7:3.2.2-1 | 7:3.2.2-1 |
| ffmpeg/ffmpeg | <= 2.8.9 | No fix listed |
| ffmpeg/ffmpeg | = 3.0 | No fix listed |
| ffmpeg/ffmpeg | = 3.0.1 | No fix listed |
| ffmpeg/ffmpeg | = 3.0.2 | No fix listed |
| ffmpeg/ffmpeg | = 3.0.3 | No fix listed |
| ffmpeg/ffmpeg | = 3.0.4 | No fix listed |
| ffmpeg/ffmpeg | = 3.1 | No fix listed |
| ffmpeg/ffmpeg | = 3.1.1 | No fix listed |
| ffmpeg/ffmpeg | = 3.1.2 | No fix listed |
| ffmpeg/ffmpeg | = 3.1.3 | No fix listed |
| ffmpeg/ffmpeg | = 3.1.4 | No fix listed |
| ffmpeg/ffmpeg | = 3.1.5 | No fix listed |
| ffmpeg/ffmpeg | = 3.2 | No fix listed |
| ffmpeg/ffmpeg | = 3.2.1 | No fix listed |
| alpine/ffmpeg(Alpine:v3.3) | < 2.8.11-r0 | 2.8.11-r0 |
| alpine/ffmpeg(Alpine:v3.4) | < 3.0.7-r0 | 3.0.7-r0 |
References
- Debian Security Tracker CVE-2016-10191 vendor-advisory
- [oss-security] 20170201 CVE Request: ffmpeg remote exploitaion results code execution mailing-list patch third-party-advisory
- [oss-security] 20170202 Re: CVE Request: ffmpeg remote exploitaion results code execution mailing-list patch third-party-advisory
- 95989 vdb-entry
- ffmpeg.org release-notes vendor-advisory
- github.com patch
- [debian-lts-announce] 20181220 [SECURITY] [DLA 1611-1] libav security update mailing-list
- security.alpinelinux.org vendor-advisory