CVE-2017-5840

2017-02-0915:59:00

Debian Security Bug Tracker

security-tracker.debian.org

0.015 Low

EPSS

Percentile

86.9%

JSON

The qtdemux_parse_samples function in gst/isomp4/qtdemux.c in gst-plugins-good in GStreamer before 1.10.3 allows remote attackers to cause a denial of service (out-of-bounds heap read) via vectors involving the current stts index.

OSVersionArchitecturePackageVersionFilename
Debian12allgst-plugins-good1.0< 1.10.3-1gst-plugins-good1.0_1.10.3-1_all.deb
Debian11allgst-plugins-good1.0< 1.10.3-1gst-plugins-good1.0_1.10.3-1_all.deb
Debian10allgst-plugins-good1.0< 1.10.3-1gst-plugins-good1.0_1.10.3-1_all.deb
Debian999allgst-plugins-good1.0< 1.10.3-1gst-plugins-good1.0_1.10.3-1_all.deb
Debian13allgst-plugins-good1.0< 1.10.3-1gst-plugins-good1.0_1.10.3-1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	gst-plugins-good1.0	< 1.10.3-1	gst-plugins-good1.0_1.10.3-1_all.deb
Debian	11	all	gst-plugins-good1.0	< 1.10.3-1	gst-plugins-good1.0_1.10.3-1_all.deb
Debian	10	all	gst-plugins-good1.0	< 1.10.3-1	gst-plugins-good1.0_1.10.3-1_all.deb
Debian	999	all	gst-plugins-good1.0	< 1.10.3-1	gst-plugins-good1.0_1.10.3-1_all.deb
Debian	13	all	gst-plugins-good1.0	< 1.10.3-1	gst-plugins-good1.0_1.10.3-1_all.deb