PT-2017-16708

CVE-2017-5846

·

Published

2017-01-30

·

Updated

2026-10-31

Description by

CVSS 3.1
5.5
Medium
MetricsAV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions GStreamer versions prior to 1.10.3
Description The issue allows remote attackers to cause a denial of service, resulting in an invalid memory read and crash. This is related to the number of languages in a video file, specifically involving the gst asf demux process ext stream props function in gst-plugins-ugly.
Recommendations For versions prior to 1.10.3, update to version 1.10.3 or later to resolve the issue. As a temporary workaround, consider restricting the processing of video files with multiple languages to minimize the risk of exploitation.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
Related identifiers
ALT-PU-2017-1106
CLEANSTART-2024-OH33470
DLA-2226-1
DLA-829-1
DSA-3821-1
MGASA-2018-0014
MGASA-2018-0015
OPENSUSE-SU-2024:10826-1
Found an issue in the description? Have something to add? Feel free to write us 👾