CVE-2017-11684
Fixed in a distro release EPSS 2%
There is an illegal address access in the build_table function in libavcodec/bitstream.c of Libav 12.1 that will lead to remote denial of service via crafted input.
Products: libav
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | ffmpeg | 7:2.3.1-1 |
| Debian 13 | ffmpeg | 7:2.3.1-1 |
| Debian 14 | ffmpeg | 7:2.3.1-1 |
| Ubuntu Pro 14.04 LTS | libav | no fix |