DeutschShown in its original language — a full translation is planned for a future version.
GStreamer: Mehrere Schwachstellen
view advisory published 2017-02-01
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in GStreamer ausnutzen, um beliebigen Programmcode mit Benutzerrechten auszuführen oder einen Denial of Service zu verursachen.
01
describes (13)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2017-5847US | high7.5 | — | ||
The gst_asf_demux_process_ext_content_desc function in gst/asfdemux/gstasfdemux.c in gst-plugins-ugly in GStreamer allows remote attackers to cause a denial of service (out-of-boun… | ||||
| CVE-2017-5846US | medium5.5 | — | ||
The gst_asf_demux_process_ext_stream_props function in gst/asfdemux/gstasfdemux.c in gst-plugins-ugly in GStreamer before 1.10.3 allows remote attackers to cause a denial of servic… | ||||
| CVE-2017-5845US | high7.5 | — | ||
The gst_avi_demux_parse_ncdt function in gst/avi/gstavidemux.c in gst-plugins-good in GStreamer before 1.10.3 allows remote attackers to cause a denial of service (invalid memory r… | ||||
| CVE-2017-5844US | medium5.5 | — | ||
The gst_riff_create_audio_caps function in gst-libs/gst/riff/riff-media.c in gst-plugins-base in GStreamer before 1.10.3 allows remote attackers to cause a denial of service (float… | ||||
| CVE-2017-5843US | high7.5 | — | ||
Multiple use-after-free vulnerabilities in the (1) gst_mini_object_unref, (2) gst_tag_list_unref, and (3) gst_mxf_demux_update_essence_tracks functions in GStreamer before 1.10.3 a… | ||||
| CVE-2017-5842US | medium5.5 | — | ||
The html_context_handle_element function in gst/subparse/samiparse.c in gst-plugins-base in GStreamer before 1.10.3 allows remote attackers to cause a denial of service (out-of-bou… | ||||
| CVE-2017-5841US | high7.5 | — | ||
The gst_avi_demux_parse_ncdt function in gst/avi/gstavidemux.c in gst-plugins-good in GStreamer before 1.10.3 allows remote attackers to cause a denial of service (out-of-bounds he… | ||||
| CVE-2017-5840US | high7.5 | — | ||
The qtdemux_parse_samples function in gst/isomp4/qtdemux.c in gst-plugins-good in GStreamer before 1.10.3 allows remote attackers to cause a denial of service (out-of-bounds heap r… | ||||
| CVE-2017-5839US | high7.5 | — | ||
The gst_riff_create_audio_caps function in gst-libs/gst/riff/riff-media.c in gst-plugins-base in GStreamer before 1.10.3 does not properly limit recursion, which allows remote atta… | ||||
| CVE-2017-5838US | high7.5 | — | ||
The gst_date_time_new_from_iso8601_string function in gst/gstdatetime.c in GStreamer before 1.10.3 allows remote attackers to cause a denial of service (out-of-bounds heap read) vi… | ||||
| CVE-2017-5837US | medium5.5 | — | ||
The gst_riff_create_audio_caps function in gst-libs/gst/riff/riff-media.c in gst-plugins-base in GStreamer before 1.10.3 allows remote attackers to cause a denial of service (float… | ||||
| CVE-2016-10199US | high7.5 | — | ||
The qtdemux_tag_add_str_full function in gst/isomp4/qtdemux.c in gst-plugins-good in GStreamer before 1.10.3 allows remote attackers to cause a denial of service (out-of-bounds rea… | ||||
| CVE-2016-10198US | medium5.5 | — | ||
The gst_aac_parse_sink_setcaps function in gst/audioparsers/gstaacparse.c in gst-plugins-good in GStreamer before 1.10.3 allows remote attackers to cause a denial of service (inval… | ||||
02
references
External citations — patches, advisories, analysis.
- Eintrag in der OSS Mailing Liste vom 2017-02-01external
- Ubuntu Security Notice USN-3244-1 vom 2017-03-27external
- Ubuntu Security Notice USN-3245-1 vom 2017-03-27external
- RedHat Secutity Advisory: RHSA-2017:2060external
- Debian Security Advisory DLA 2126 vom 2020-03-02external
- Debian Security Advisory DLA 2164 vom 2020-04-01external
- Debian Security Advisory DLA 2225 vom 2020-05-30external
- Debian Security Advisory DLA 2226 vom 2020-05-30external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan