Ubuntu.comUB:CVE-2017-17555CVE-2017-17555
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
EPSS
Percentile
49.3%
The swri_audio_convert function in audioconvert.c in FFmpeg libswresample
through 3.0.101, as used in FFmpeg 3.4.1, aubio 0.4.6, and other products,
allows remote attackers to cause a denial of service (NULL pointer
dereference and application crash) via a crafted audio file.
Bugs
References
github.com/aubio/aubio/issues/137
github.com/IvanCql/vulnerability/blob/master/An%20NULL%20pointer%20dereference(DoS)%20Vulnerability%20was%20found%20in%20function%20swri_audio_convert%20of%20ffmpeg%20libswresample.md
launchpad.net/bugs/cve/CVE-2017-17555
nvd.nist.gov/vuln/detail/CVE-2017-17555
security-tracker.debian.org/tracker/CVE-2017-17555
www.cve.org/CVERecord?id=CVE-2017-17555
Related
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
EPSS
Percentile
49.3%