How severe is CVE-2017-14056?

This vulnerability has a severity rating of MEDIUM with a CVSS score of 6.5 out of 10.

What type of vulnerability is CVE-2017-14056?

This is classified as CWE-834, which is a common weakness in software security.

CVE-2017-14056 - MEDIUM Severity | CVSS 6.5

Vulnerability Description

In libavformat/rl2.c in FFmpeg 3.3.3, a DoS in rl2_read_header() due to lack of an EOF (End of File) check might cause huge CPU and memory consumption. When a crafted RL2 file, which claims a large "frame_count" field in the header but does not contain sufficient backing data, is provided, the loops (for offset and size tables) would consume huge CPU and memory resources, since there is no EOF check inside these loops.

Related Vulnerabilities

CVE-2017-11360

MEDIUM

CVSS:6.5(Medium)

The ReadRLEImage function in coders\rle.c in ImageMagick 7.0.6-1 has a large loop vulnerability via a crafted rle file that triggers a huge number_pixels value.

CWE-8342017

CVE-2017-11505

MEDIUM

CVSS:6.5(Medium)

The ReadOneJNGImage function in coders/png.c in ImageMagick through 6.9.9-0 and 7.x through 7.0.6-1 allows remote attackers to cause a denial of service (large loop and CPU consumption) via a malforme...

CWE-8342017

CVE-2017-12674

MEDIUM

CVSS:6.5(Medium)

In ImageMagick 7.0.6-2, a CPU exhaustion vulnerability was found in the function ReadPDBImage in coders/pdb.c, which allows attackers to cause a denial of service.

CWE-8342017

CVE-2017-13776

MEDIUM

CVSS:6.5(Medium)

GraphicsMagick 1.3.26 has a denial of service issue in ReadXBMImage() in a coders/xbm.c "Read hex image data" version!=10 case that results in the reader not returning; it would cause large amounts of...

CWE-8342017

CVE-2017-13777

MEDIUM

CVSS:6.5(Medium)

GraphicsMagick 1.3.26 has a denial of service issue in ReadXBMImage() in a coders/xbm.c "Read hex image data" version==10 case that results in the reader not returning; it would cause large amounts of...

CWE-8342017

CVE-2017-14054

MEDIUM

CVSS:6.5(Medium)

In libavformat/rmdec.c in FFmpeg 3.3.3, a DoS in ivr_read_header() due to lack of an EOF (End of File) check might cause huge CPU consumption. When a crafted IVR file, which claims a large "len" field...

CWE-8342017