« Volver al listado

CVE-2017-16803

Estado: ModificadaAlta (7.5)—

En Libav hasta la versión 11.11 y las versiones 12.x hasta la 12.1, la función smacker_decode_tree en libavcodec/smacker.c no restringe correctamente la recursión de árbol, lo que permite que atacantes remotos provoquen una denegación de servicio (lectura fuera de límites de bitstream.c:build_table() y cierre inesperado de la aplicación) mediante una transmisión Smacker manipulada.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Libav — Libav

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2017-16803",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV30": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.0",
          "baseScore": 7.5,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 3.9
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2017-11-13T17:29:00.567",
  "references": [
    {
      "url": "http://www.securityfocus.com/bid/101882",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://bugzilla.libav.org/show_bug.cgi?id=1098",
      "tags": [
        "Issue Tracking"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://github.com/libav/libav/commit/cd4663dc80323ba64989d0c103d51ad3ee0e9c2f",
      "tags": [
        "Issue Tracking"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://security.gentoo.org/glsa/201811-19",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://www.debian.org/security/2018/dsa-4119",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/101882",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://bugzilla.libav.org/show_bug.cgi?id=1098",
      "tags": [
        "Issue Tracking"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://github.com/libav/libav/commit/cd4663dc80323ba64989d0c103d51ad3ee0e9c2f",
      "tags": [
        "Issue Tracking"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://security.gentoo.org/glsa/201811-19",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://www.debian.org/security/2018/dsa-4119",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-119"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "In Libav through 11.11 and 12.x through 12.1, the smacker_decode_tree function in libavcodec/smacker.c does not properly restrict tree recursion, which allows remote attackers to cause a denial of service (bitstream.c:build_table() out-of-bounds read and application crash) via a crafted Smacker stream."
    },
    {
      "lang": "es",
      "value": "En Libav hasta la versión 11.11 y las versiones 12.x hasta la 12.1, la función smacker_decode_tree en libavcodec/smacker.c no restringe correctamente la recursión de árbol, lo que permite que atacantes remotos provoquen una denegación de servicio (lectura fuera de límites de bitstream.c:build_table() y cierre inesperado de la aplicación) mediante una transmisión Smacker manipulada."
    }
  ],
  "lastModified": "2026-06-17T01:09:56.953",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:libav:libav:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D64C7955-5796-4434-8FC0-4486FE1E2AB5",
              "versionEndIncluding": "11.11"
            },
            {
              "criteria": "cpe:2.3:a:libav:libav:12.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D26A9134-C152-46A4-83AB-F61EF54A69B7"
            },
            {
              "criteria": "cpe:2.3:a:libav:libav:12.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "99846C93-A0F8-459D-AC79-A79CDE487505"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}