Candidate: CVE-2015-8218 PublicDate: 2015-11-17 01:59:00 UTC References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8218 Description: The decode_uncompressed function in libavcodec/faxcompr.c in FFmpeg before 2.8.2 does not validate uncompressed runs, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted CCITT FAX data. Ubuntu-Description: Notes: Bugs: Priority: medium Discovered-by: Assigned-to: CVSS: Patches_ffmpeg: upstream: http://git.videolan.org/?p=ffmpeg.git;a=commit;h=d4a731b84a08f0f3839eaaaf82e97d8d9c67da46 upstream_ffmpeg: needs-triage precise_ffmpeg: DNE trusty_ffmpeg: DNE trusty/esm_ffmpeg: DNE vivid_ffmpeg: not-affected (code not present) vivid/stable-phone-overlay_ffmpeg: DNE vivid/ubuntu-core_ffmpeg: DNE wily_ffmpeg: not-affected (code not present) devel_ffmpeg: not-affected (7:2.8.3-1) Patches_libav: upstream_libav: needs-triage precise_libav: not-affected (code not present) trusty_libav: not-affected (code not present) trusty/esm_libav: DNE (trusty was not-affected [code not present]) vivid_libav: ignored (reached end-of-life) vivid/stable-phone-overlay_libav: DNE vivid/ubuntu-core_libav: DNE wily_libav: DNE devel_libav: DNE