CVE-2017-17555: PYSEC-2017-77 - The swri_audio_convert function in audioconvert.c in FFmpeg libswresample through 3.0.101, as used in…
CVE-2017-17555 · Severity: info · Published 2017-12-12
The swri_audio_convert function in audioconvert.c in FFmpeg libswresample through 3.0.101, as used in FFmpeg 3.4.1, aubio 0.4.6, and other products, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted audio file.
No. Junglewise Threat Intelligence has no report of CVE-2017-17555 being exploited in the wild.
How severe is CVE-2017-17555?
Informational severity, published 12 December 2017.
Which products and versions are affected?
aubio (PyPI) ECOSYSTEM:introduced=0,fixed=0.4.7.
Is there a fix for CVE-2017-17555?
Yes. aubio (PyPI): upgrade to 0.4.7 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
Am I affected by CVE-2017-17555?
Check whether you run aubio (PyPI) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.