CVE

Id
102663  
CVE No.
CVE-2017-5843  
Status
Candidate  
Description
Multiple use-after-free vulnerabilities in the (1) gst_mini_object_unref, (2) gst_tag_list_unref, and (3) gst_mxf_demux_update_essence_tracks functions in GStreamer before 1.10.3 allow remote attackers to cause a denial of service (crash) via vectors involving stream tags, as demonstrated by 02785736.mxf.  
Phase
Assigned (20170201)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
805499 102663 CVE-2017-5843 MLIST:[oss-security] 20170201 Multiple memory access issues in gstreamer  View
805500 102663 CVE-2017-5843 URL:http://www.openwall.com/lists/oss-security/2017/02/01/7  View
805501 102663 CVE-2017-5843 MLIST:[oss-security] 20170202 Re: Multiple memory access issues in gstreamer  View
805502 102663 CVE-2017-5843 URL:http://www.openwall.com/lists/oss-security/2017/02/02/9  View
805503 102663 CVE-2017-5843 CONFIRM:https://bugzilla.gnome.org/show_bug.cgi?id=777503  View
805504 102663 CVE-2017-5843 CONFIRM:https://gstreamer.freedesktop.org/releases/1.10/#1.10.3  View
805505 102663 CVE-2017-5843 BID:96001  View

Related JVN