The gst_riff_create_audio_caps function in gst-libs/gst/riff/riff-media.c in gst-plugins-base in GStreamer before 1.10.3 does not properly limit recursion, which allows remote attackers to cause a denial of service (stack overflow and crash) via vectors involving nested WAVEFORMATEX.
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
Alpine | 3.4-main | noarch | gst-plugins-base1 | < 1.8.3-r0 | UNKNOWN |
Alpine | 3.5-main | noarch | gst-plugins-base1 | < 1.8.3-r0 | UNKNOWN |