CVE-2019-14442
Fixed in a distro release EPSS 1%
In mpc8_read_header in libavformat/mpc8.c in Libav 12.3, an input file can result in an avio_seek infinite loop and hang, with 100% CPU consumption. Attackers could leverage this vulnerability to cause a denial of service via a crafted file.
Products: libav, debian_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 8 | libav | 6:11.12-1~deb8u8 |
| Ubuntu Pro 14.04 LTS | libav | no fix |