Excessive Iteration
CVE-2017-14059
Summary
In FFmpeg prior to 2.4.14, 2.5.x prior to 2.8.13, 3.0.x prior to 3.0.10, 3.1-dev prior to 3.1.11, 3.2.x prior to 3.2.8, 3.3.x prior to 3.3.4, and 3.4-dev a DoS in cine_read_header() due to lack of an EOF check might cause huge CPU and memory consumption. When a crafted CINE file, which claims a large "duration" field in the header but does not contain sufficient backing data, is provided, the image-offset parsing loop would consume huge CPU and memory resources, since there is no EOF check inside the loop.
- LOW
- NETWORK
- NONE
- UNCHANGED
- REQUIRED
- NONE
- NONE
- HIGH
CWE-834 - Excessive Iteration
The software performs an iteration or loop without sufficiently limiting the number of times that the loop is executed.
References
Advisory Timeline
- Published