CVE-2017-9987
Fixed in a distro release EPSS 2%
There is a heap-based buffer overflow in the function hpel_motion in mpegvideo_motion.c in libav 12.1. A crafted input can lead to a remote denial of service attack.
Products: libav
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 8 | libav | 6:11.12-1~deb8u8 |
| Ubuntu Pro 14.04 LTS | libav | no fix |