CVE-2017-5839

2017-02-0915:59:00

Debian Security Bug Tracker

security-tracker.debian.org

0.037 Low

EPSS

Percentile

91.8%

JSON

The gst_riff_create_audio_caps function in gst-libs/gst/riff/riff-media.c in gst-plugins-base in GStreamer before 1.10.3 does not properly limit recursion, which allows remote attackers to cause a denial of service (stack overflow and crash) via vectors involving nested WAVEFORMATEX.

OSVersionArchitecturePackageVersionFilename
Debian12allgst-plugins-base1.0< 1.10.3-1gst-plugins-base1.0_1.10.3-1_all.deb
Debian11allgst-plugins-base1.0< 1.10.3-1gst-plugins-base1.0_1.10.3-1_all.deb
Debian10allgst-plugins-base1.0< 1.10.3-1gst-plugins-base1.0_1.10.3-1_all.deb
Debian999allgst-plugins-base1.0< 1.10.3-1gst-plugins-base1.0_1.10.3-1_all.deb
Debian13allgst-plugins-base1.0< 1.10.3-1gst-plugins-base1.0_1.10.3-1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	gst-plugins-base1.0	< 1.10.3-1	gst-plugins-base1.0_1.10.3-1_all.deb
Debian	11	all	gst-plugins-base1.0	< 1.10.3-1	gst-plugins-base1.0_1.10.3-1_all.deb
Debian	10	all	gst-plugins-base1.0	< 1.10.3-1	gst-plugins-base1.0_1.10.3-1_all.deb
Debian	999	all	gst-plugins-base1.0	< 1.10.3-1	gst-plugins-base1.0_1.10.3-1_all.deb
Debian	13	all	gst-plugins-base1.0	< 1.10.3-1	gst-plugins-base1.0_1.10.3-1_all.deb