CVE-2018-5766

In Libav through 12.2, there is an invalid memcpy in the av_packet_ref function of libavcodec/avpacket.c. Remote attackers could leverage this vulnerability to cause a denial of service (segmentation fault) via a crafted avi file.
Severity
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Atk. Vector
NETWORK
Atk. Complexity
LOW
Priv. Required
NONE
Base Score
CVSS 3.x
EPSS Score
Percentile: 82%
VendorProductVersion
libavlibav
𝑥
≤ 12.2
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
libav
noble
dne
mantic
dne
lunar
dne
kinetic
dne
jammy
dne
focal
dne
disco
dne
cosmic
dne
bionic
dne
artful
dne
xenial
dne
trusty
needed
Common Weakness Enumeration
References
http://www.securityfocus.com/bid/102793
https://bugzilla.libav.org/show_bug.cgi?id=1112
https://lists.debian.org/debian-lts-announce/2019/09/msg00000.html
http://www.securityfocus.com/bid/102793
https://bugzilla.libav.org/show_bug.cgi?id=1112
https://lists.debian.org/debian-lts-announce/2019/09/msg00000.html