[ASA-201702-3] gst-plugins-good: denial of service

🗓️ 03 Feb 2017 00:00:00Reported by ArchLinuxType

archlinux

archlinux🔗 security.archlinux.org👁 32 Views

The package gst-plugins-good before version 1.10.3-1 is vulnerable to denial of service due to multiple CVEs

Reporter	Title	Published	Views	Family All 136
AlpineLinux	CVE-2016-10198	9 Feb 201715:00	–	alpinelinux
AlpineLinux	CVE-2016-10199	9 Feb 201715:00	–	alpinelinux
AlpineLinux	CVE-2017-5840	9 Feb 201715:00	–	alpinelinux
AlpineLinux	CVE-2017-5841	9 Feb 201715:00	–	alpinelinux
AlpineLinux	CVE-2017-5845	9 Feb 201715:00	–	alpinelinux
BDU FSTEC	The vulnerability of the gst_aac_parse_sink_setcaps function (gst/audioparsers/gstaacparse.c) in the gst-plugins-good plugin for the Gstreamer multimedia framework allows a malicious actor to cause a service failure.	16 Feb 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the qtdemux_tag_add_str_full function (gst/isomp4/qtdemux.c) in the gst-plugins-good plugin for the Gstreamer multimedia framework allows a attacker to trigger a service failure.	16 Feb 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the `qtdemux_parse_samples` function (gst/isomp4/qtdemux.c) in the Gstreamer multimedia framework’s Gst-plugins-good plugin allows a hacker to trigger a service failure.	16 Feb 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the gst_avi_demux_parse_ncdt function (gst/avi/gstavidemux.c) in the Gstreamer multimedia framework’s gst-plugins-good plugin. This vulnerability allows an attacker to cause a service failure.	16 Feb 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the gst_avi_demux_parse_ncdt function (gst/avi/gstavidemux.c) in the Gstreamer multimedia framework’s gst-plugins-good plugin. This vulnerability allows an attacker to cause a service failure.	16 Feb 202100:00	–	bdu_fstec

OS	OS Version	Architecture	Package	Package Version	Filename
Arch Linux	–	any	gst-plugins-good	1.10.3-1	gst-plugins-good-1.10.3-1-any.pkg.tar.zst

Source	Link
security	www.security.archlinux.org/AVG-163
seclists	www.seclists.org/oss-sec/2017/q1/284
bugzilla	www.bugzilla.gnome.org/show_bug.cgi
bugzilla	www.bugzilla.gnome.org/show_bug.cgi
bugzilla	www.bugzilla.gnome.org/show_bug.cgi
bugzilla	www.bugzilla.gnome.org/show_bug.cgi
bugzilla	www.bugzilla.gnome.org/show_bug.cgi
security	www.security.archlinux.org/CVE-2016-10198
security	www.security.archlinux.org/CVE-2016-10199
security	www.security.archlinux.org/CVE-2017-5840

03 Feb 2017 00:00Current

1.1Low risk

Vulners AI Score1.1

CVSS 25

CVSS 37.5

EPSS0.04717

gst-plugins-good denial of service cve-2016-10198 cve-2016-10199 cve-2017-5840 cve-2017-5841 cve-2017-5845 gstreamer arch linux