Libav Remote Denial of Service Vulnerability (CVE-2018-5766)

Libav Remote Denial of Service Vulnerability (CVE-2018-5766)
Libav Remote Denial of Service Vulnerability (CVE-2018-5766)

Release date:
Updated on:

Affected Systems:

Libav <= 12.2

Description:

Bugtraq id: 102793
CVE (CAN) ID: CVE-2018-5766

Libav is a cross-platform free software that allows you to perform video, transfer, and stream functions in multimedia formats and protocols.

In Libav 12.2 and earlier versions, the libavcodec/avpacket. c/av_packet_ref function has an invalid memcpy, which allows remote attackers to exploit this vulnerability to cause DoS by constructing avi files.

<* Source: vendor
*>

Suggestion:

Vendor patch:

Libav
-----
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://libav.org/
Https://bugzilla.libav.org/show_bug.cgi? Id = 1112