CVE-2017-7208
Fixed in a distro release EPSS 1%
The decode_residual function in libavcodec in libav 9.21 allows remote attackers to cause a denial of service (buffer over-read) or obtain sensitive information from process memory via a crafted h264 video file.
Products: libav
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 7 | libav | 6:0.8.21-0+deb7u1 |
| Debian 8 | libav | 6:11.11-1~deb8u1 |
| Ubuntu Pro 14.04 LTS | libav | no fix |