In FFmpeg 2.4 and 3.3.3, the read_data function in libavformat/hls.c does not restrict reload attempts for an insufficient list, which allows remote attackers to cause a denial of service (infinite loop).
The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Ffmpeg | Ffmpeg | 3.3.3 (including) | 3.3.3 (including) |
| Ffmpeg | Ubuntu | artful | * |
| Ffmpeg | Ubuntu | xenial | * |
| Ffmpeg | Ubuntu | zesty | * |