CVE-2017-5845

2017-02-0915:59:00

Debian Security Bug Tracker

security-tracker.debian.org

0.015 Low

EPSS

Percentile

86.9%

JSON

The gst_avi_demux_parse_ncdt function in gst/avi/gstavidemux.c in gst-plugins-good in GStreamer before 1.10.3 allows remote attackers to cause a denial of service (invalid memory read and crash) via a ncdt sub-tag that “goes behind” the surrounding tag.

OSVersionArchitecturePackageVersionFilename
Debian12allgst-plugins-good1.0< 1.10.3-1gst-plugins-good1.0_1.10.3-1_all.deb
Debian11allgst-plugins-good1.0< 1.10.3-1gst-plugins-good1.0_1.10.3-1_all.deb
Debian10allgst-plugins-good1.0< 1.10.3-1gst-plugins-good1.0_1.10.3-1_all.deb
Debian999allgst-plugins-good1.0< 1.10.3-1gst-plugins-good1.0_1.10.3-1_all.deb
Debian13allgst-plugins-good1.0< 1.10.3-1gst-plugins-good1.0_1.10.3-1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	gst-plugins-good1.0	< 1.10.3-1	gst-plugins-good1.0_1.10.3-1_all.deb
Debian	11	all	gst-plugins-good1.0	< 1.10.3-1	gst-plugins-good1.0_1.10.3-1_all.deb
Debian	10	all	gst-plugins-good1.0	< 1.10.3-1	gst-plugins-good1.0_1.10.3-1_all.deb
Debian	999	all	gst-plugins-good1.0	< 1.10.3-1	gst-plugins-good1.0_1.10.3-1_all.deb
Debian	13	all	gst-plugins-good1.0	< 1.10.3-1	gst-plugins-good1.0_1.10.3-1_all.deb