NVD

Id
82244  
Name
CVE-2017-5839  
Description
The gst_riff_create_audio_caps function in gst-libs/gst/riff/riff-media.c in gst-plugins-base in GStreamer before 1.10.3 does not properly limit recursion, which allows remote attackers to cause a denial of service (stack overflow and crash) via vectors involving nested WAVEFORMATEX.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-07-18  
Published
2017-02-09  
Modified Date
2017-06-30  
Seq
2017-5839  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
406226 82244 CVE-2016-10186 95877  View
406227 82244 CVE-2016-10186 https://pierrekim.github.io/blog/2016-09-28-dlink-dwr-932b-lte-routers-vulnerabilities.html  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
65156 JVNDB-2017-001534 GStreamer の gst-plugins-base の gst-libs/gst/riff/riff-media.c におけるサービス運用妨害 (DoS) の脆弱性 GStreamer の gst-plugins-base の gst-libs/gst/riff/riff-media.c の gst_riff_create_audio_caps 関数は、適切に再帰を制限しないため、サービス運用妨害 (スタックオーバーフローおよびクラッシュ) 状態にされる脆弱性が存在します。 CVE-2017-5839 CVE-2017-5839 82244 5 7.5 http://jvndb.jvn.jp/ja/contents/2017/JVNDB-2017-001534.html 2017-01-30 2017-02-24 View