CVE-2012-6617
The prepare_sdp_description function in ffserver.c in FFmpeg before 1.0.2 allows remote attackers...
4.3 Medium
The prepare_sdp_description function in ffserver.c in FFmpeg before 1.0.2 allows remote attackers to cause a denial of service (crash) via vectors related to the rtp format.
Exploit likelihood
2.26%Up 1.0 points since Feb 4, 2022
What each source reports
NVD Score used
The prepare_sdp_description function in ffserver.c in FFmpeg before 1.0.2 allows remote attackers to cause a denial of service (crash) via vectors related to the rtp format.
- Record
CVE-2012-6617- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:N/A:P - Updated
- 2026-11-02
CVE List No score
The prepare_sdp_description function in ffserver.c in FFmpeg before 1.0.2 allows remote attackers to cause a denial of service (crash) via vectors related to the rtp format.
- Record
CVE-2012-6617- Updated
- 2026-11-02
EUVDEUVD-2012-6463 No score
The prepare_sdp_description function in ffserver.c in FFmpeg before 1.0.2 allows remote attackers to cause a denial of service (crash) via vectors related to the rtp format.
- Record
EUVD-2012-6463- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-5p79-rx54-3929 No score
The prepare_sdp_description function in ffserver.c in FFmpeg before 1.0.2 allows remote attackers...
The prepare_sdp_description function in ffserver.c in FFmpeg before 1.0.2 allows remote attackers to cause a denial of service (crash) via vectors related to the rtp format.
- Record
GHSA-5p79-rx54-3929- Updated
- 2026-11-02
OSVUBUNTU-CVE-2012-6617 No score
The prepare_sdp_description function in ffserver.c in FFmpeg before 1.0.2 allows remote attackers to cause a denial of service (crash) via vectors related to the rtp format.
- Record
UBUNTU-CVE-2012-6617- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
libavUbuntu:Pro:14.04:LTS |
All versions, plus listed versions 6:0.8.7-1ubuntu26:9.10-1ubuntu16:9.10-1ubuntu26:9.10-1ubuntu56:9.10-1ubuntu6 Show 9 moreShow less6:9.10-1ubuntu76:9.11-2ubuntu16:9.11-2ubuntu26:9.13-0ubuntu0.14.04.16:9.14-0ubuntu0.14.04.16:9.16-0ubuntu0.14.04.16:9.18-0ubuntu0.14.04.16:9.20-0ubuntu0.14.04.16:9.20-0ubuntu0.14.04.1+esm1 |
None known |
oxide-qtUbuntu:16.04:LTS |
All versions, plus listed versions 1.9.5-0ubuntu11.10.3-0ubuntu0.15.10.11.10.3-0ubuntu0.15.10.21.11.3-0ubuntu31.11.4-0ubuntu1 Show 17 moreShow less1.11.5-0ubuntu11.12.5-0ubuntu11.12.6-0ubuntu11.12.7-0ubuntu11.13.6-0ubuntu11.14.7-0ubuntu11.14.9-0ubuntu0.16.04.11.15.7-0ubuntu0.16.04.11.15.8-0ubuntu0.16.04.11.16.5-0ubuntu0.16.04.11.17.7-0ubuntu0.16.04.11.17.9-0ubuntu0.16.04.11.18.3-0ubuntu0.16.04.11.18.5-0ubuntu0.16.04.11.19.4-0ubuntu0.16.04.11.20.4-0ubuntu0.16.04.11.21.5-0ubuntu0.16.04.1 |
None known |
gst-libav1.0Ubuntu:16.04:LTS |
All versions, plus listed versions 1.6.0-11.6.0-21.6.1-11.6.2-11.7.1-1 Show 7 moreShow less1.7.2-11.7.90-11.8.0-11.8.1-1~ubuntu11.8.2-1~ubuntu11.8.3-1ubuntu0.11.8.3-1ubuntu0.2 |
None known |
mythtvUbuntu:16.04:LTS |
All versions, plus listed versions 2:0.27.1+fixes.20140624.aa822f5-0ubuntu62:0.27.1+fixes.20140624.aa822f5-0ubuntu72:0.27.1+fixes.20140624.aa822f5-0ubuntu92:0.28.0+fixes.20160217.44fd8a6-0ubuntu42:0.28.0+fixes.20160229.ae35a28-0ubuntu1 Show 6 moreShow less2:0.28.0+fixes.20160321.39e409d-0ubuntu12:0.28.0+fixes.20160321.39e409d-0ubuntu22:0.28.0+fixes.20160325.2520617-0ubuntu32:0.28.0+fixes.20160413.15cf421-0ubuntu12:0.28.0+fixes.20160413.15cf421-0ubuntu22:0.28.0+fixes.20160413.15cf421-0ubuntu2.16.04.1 |
None known |
gst-libav1.0Ubuntu:18.04:LTS |
All versions, plus listed versions 1.12.2-11.12.3-11.12.4-11.13.91-11.14.0-11.14.1-1~ubuntu18.04.11.14.4-0ubuntu1~ubuntu18.04.11.14.5-0ubuntu1~18.04.1 |
None known |
mythtvUbuntu:18.04:LTS |
All versions, plus listed versions 2:29.0+fixes.20170728.696806310a-0ubuntu12:29.0+fixes.20170728.696806310a-0ubuntu32:29.0+fixes.20170728.696806310a-0ubuntu42:29.0+fixes.20170728.696806310a-0ubuntu52:29.0+fixes.20170728.696806310a-0ubuntu6 Show 5 moreShow less2:29.0+fixes.20170728.696806310a-0ubuntu72:29.0+fixes.20170728.696806310a-0ubuntu82:29.1+fixes.20180220.9b7b962-0ubuntu22:29.1+fixes.20180220.9b7b962-0ubuntu32:29.1+fixes.20180414.329c235-0ubuntu3 |
None known |
qtwebengine-opensource-srcUbuntu:Pro:18.04:LTS |
All versions, plus listed versions 5.9.1+dfsg-45.9.1+dfsg-4ubuntu15.9.2+dfsg-2ubuntu15.9.3+dfsg-0ubuntu15.9.4+dfsg-0ubuntu15.9.5+dfsg-0ubuntu25.9.5+dfsg-0ubuntu2+esm1 |
None known |
gst-libav1.0Ubuntu:20.04:LTS |
All versions, plus listed versions 1.16.1-11.16.2-11.16.2-2 |
None known |
mythtvUbuntu:20.04:LTS |
All versions, plus listed versions 2:30.0+fixes.20190817.5cde0578d8-0ubuntu12:30.0+fixes.20190817.5cde0578d8-0ubuntu22:30.0+fixes.20190817.5cde0578d8-0ubuntu32:31.0+fixes.20200207.35cb9ed0c5-0ubuntu22:31.0+fixes.20200323.9579662cdc-0ubuntu1 |
None known |
qtwebengine-opensource-srcUbuntu:Pro:20.04:LTS |
All versions, plus listed versions 5.12.4+dfsg-1ubuntu15.12.4+dfsg-1ubuntu35.12.5+dfsg-3ubuntu15.12.5+dfsg-6ubuntu25.12.5+dfsg-7 Show 4 moreShow less5.12.5+dfsg-7build15.12.8+dfsg-0ubuntu15.12.8+dfsg-0ubuntu1.15.12.8+dfsg-0ubuntu1.1+esm1 |
None known |
Show 15 moreShow less
| Package | Affected | Fixed |
|---|---|---|
gst-libav1.0Ubuntu:22.04:LTS |
All versions, plus listed versions 1.18.5-11.20.0-11.20.1-11.20.3-0ubuntu1 |
None known |
mythtvUbuntu:22.04:LTS |
All versions, plus listed versions 2:31.0+fixes.20200323.9579662cdc-0ubuntu92:31.0+fixes.20200323.9579662cdc-0ubuntu112:32.0+fixes.20220224.56275b303b-0ubuntu32:32.0+fixes.20220224.56275b303b-0ubuntu52:32.0+fixes.20220325.f69ce764b7-0ubuntu1 |
None known |
qtwebengine-opensource-srcUbuntu:Pro:22.04:LTS |
All versions, plus listed versions 5.15.6+dfsg-15.15.6+dfsg-25.15.7+dfsg-25.15.8+dfsg-15.15.8+dfsg-1build1 Show 4 moreShow less5.15.8+dfsg-1build25.15.8+dfsg-25.15.9+dfsg-15.15.9+dfsg-1ubuntu0.1~esm1 |
None known |
gst-libav1.0Ubuntu:24.04:LTS |
All versions, plus listed versions 1.22.5-11.22.6-11.22.7-11.22.8-11.22.10-11.24.1-11.24.1-1build1 |
None known |
mythtvUbuntu:24.04:LTS |
All versions, plus listed versions 2:33.0+fixes.20230210.026e506-0ubuntu02:33.0+fixes.20230210.026e506-0ubuntu22:33.0+fixes.20230210.026e506-0ubuntu32:33.0+fixes.20230210.026e506-0ubuntu42:33.0+fixes.20230210.026e506-0ubuntu5 Show 4 moreShow less2:34.0+fixes.20240210.e3e165a1-0ubuntu12:34.0+fixes.20240210.e3e165a1-0ubuntu42:34.0+fixes.20240210.e3e165a1-0ubuntu52:34.0+fixes.20240210.e3e165a1-0ubuntu6 |
None known |
qtwebengine-opensource-srcUbuntu:Pro:24.04:LTS |
All versions, plus listed versions 5.15.15+dfsg-25.15.15+dfsg-2build25.15.15+dfsg-2ubuntu15.15.16+dfsg-15.15.16+dfsg-1ubuntu25.15.16+dfsg-1ubuntu45.15.16+dfsg-35.15.16+dfsg-3ubuntu0.1~esm1 |
None known |
gst-libav1.0Ubuntu:25.10 |
All versions, plus listed versions 1.26.0-11.26.1-11.26.2-11.26.3-11.26.4-11.26.5-11.26.6-1 |
None known |
mythtvUbuntu:25.10 |
All versions, plus listed versions 2:35.0+fixes.20250302.f3f012aa3f-0ubuntu32:35.0+fixes.20250302.f3f012aa3f-0ubuntu4 |
None known |
qtwebengine-opensource-srcUbuntu:25.10 |
All versions, plus listed versions 5.15.18+dfsg-25.15.18+dfsg-2build15.15.19+dfsg-15.15.19+dfsg2-1 |
None known |
gst-libav1.0Ubuntu:26.10 |
All versions, plus listed versions 1.28.2-11.28.3-11.28.4-1build11.28.5-11.28.6-11.28.7-1 |
None known |
mythtvUbuntu:26.10 |
All versions, plus listed versions 2:36.0+fixes.20260401.1385cbfc60-0ubuntu12:36.0+fixes.20260401.1385cbfc60-0ubuntu3 |
None known |
qtwebengine-opensource-srcUbuntu:26.10 |
All versions, plus listed versions 5.15.19+dfsg2-45.15.19+dfsg2-65.15.19+dfsg2-7 |
None known |
gst-libav1.0Ubuntu:26.04:LTS |
All versions, plus listed versions 1.26.6-11.27.2-11.27.2-1build11.27.90-11.28.0-11.28.1-11.28.2-1 |
None known |
mythtvUbuntu:26.04:LTS |
All versions, plus listed versions 2:35.0+fixes.20250302.f3f012aa3f-0ubuntu42:35.0+fixes.20250302.f3f012aa3f-0ubuntu52:35.0+fixes.20250302.f3f012aa3f-0ubuntu62:35.0+fixes.20250302.f3f012aa3f-0ubuntu72:36.0+fixes.20260210.a312d68f-0ubuntu12:36.0+fixes.20260401.1385cbfc60-0ubuntu1 |
None known |
qtwebengine-opensource-srcUbuntu:Pro:26.04:LTS |
All versions, plus listed versions 5.15.19+dfsg2-15.15.19+dfsg2-1build15.15.19+dfsg2-25.15.19+dfsg2-35.15.19+dfsg2-45.15.19+dfsg2-4ubuntu0.1~esm1 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2012-6617 is a medium vulnerability (CVSS 4.3) in Ffmpeg, published December 24, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.26%, the 83rd percentile. No source names a fixed version.