CVE-2016-10192 Heap-based buffer overflow in ffserver.c in FFmpeg before 2.8.10, 3.0.x before 3.0.5, 3.1.x before 3.1.6, and 3.2.x before 3.2.2 allows remote attackers to execute arbitrary code by leveraging failure...
CriticalCVSS 9.8
EPSS 6.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Heap-based buffer overflow in ffserver.c in FFmpeg before 2.8.10, 3.0.x before 3.0.5, 3.1.x before 3.1.6, and 3.2.x before 3.2.2 allows remote attackers to execute arbitrary code by leveraging failure to check chunk size.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/ffmpeg(Debian:12) | < 7:3.2.2-1 | 7:3.2.2-1 |
| debian/ffmpeg(Debian:13) | < 7:3.2.2-1 | 7:3.2.2-1 |
| debian/ffmpeg(Debian:14) | < 7:3.2.2-1 | 7:3.2.2-1 |
| ffmpeg/ffmpeg | <= 2.8.9 | No fix listed |
| ffmpeg/ffmpeg | = 3.0 | No fix listed |
| ffmpeg/ffmpeg | = 3.0.1 | No fix listed |
| ffmpeg/ffmpeg | = 3.0.2 | No fix listed |
| ffmpeg/ffmpeg | = 3.0.3 | No fix listed |
| ffmpeg/ffmpeg | = 3.0.4 | No fix listed |
| ffmpeg/ffmpeg | = 3.1 | No fix listed |
| ffmpeg/ffmpeg | = 3.1.1 | No fix listed |
| ffmpeg/ffmpeg | = 3.1.2 | No fix listed |
| ffmpeg/ffmpeg | = 3.1.3 | No fix listed |
| ffmpeg/ffmpeg | = 3.1.4 | No fix listed |
| ffmpeg/ffmpeg | = 3.1.5 | No fix listed |
| ffmpeg/ffmpeg | = 3.2 | No fix listed |
| ffmpeg/ffmpeg | = 3.2.1 | No fix listed |
| alpine/ffmpeg(Alpine:v3.3) | < 2.8.11-r0 | 2.8.11-r0 |
| alpine/ffmpeg(Alpine:v3.4) | < 3.0.7-r0 | 3.0.7-r0 |
References
- Debian Security Tracker CVE-2016-10192 vendor-advisory
- [oss-security] 20170201 CVE Request: ffmpeg remote exploitaion results code execution mailing-list patch third-party-advisory
- [oss-security] 20170202 Re: CVE Request: ffmpeg remote exploitaion results code execution mailing-list patch third-party-advisory
- 95991 third-party-advisory vdb-entry
- ffmpeg.org release-notes vendor-advisory
- github.com patch
- security.alpinelinux.org vendor-advisory