CVE-2017-17127
Fixed in a distro release EPSS 2%
The vc1_decode_frame function in libavcodec/vc1dec.c in Libav 12.2 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted file.
Products: libav
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 8 | libav | 6:11.12-1~deb8u9 |
| Ubuntu Pro 14.04 LTS | libav | no fix |