CVE-2017-5848
Fixed in a distro release EPSS 4%
The gst_ps_demux_parse_psm function in gst/mpegdemux/gstmpegdemux.c in gst-plugins-bad in GStreamer allows remote attackers to cause a denial of service (invalid memory read and crash) via vectors involving PSM parsing.
Products: gstreamer, debian_linux, redhat enterprise_linux_desktop, redhat enterprise_linux_eus, redhat enterprise_linux_server, redhat enterprise_linux_server_aus, redhat enterprise_linux_server_tus, redhat enterprise_linux_workstation
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Arch Linux | gst-plugins-bad | 1.10.3-1 |
| Debian 12 | gst-plugins-bad1.0 | 1.10.4-1 |
| Debian 13 | gst-plugins-bad1.0 | 1.10.4-1 |
| Debian 14 | gst-plugins-bad1.0 | 1.10.4-1 |
| Debian 7 | gst-plugins-bad0.10 | 0.10.23-7.1+deb7u5 |
| Debian 8 | gst-plugins-bad0.10 | 0.10.23-7.4+deb8u3 |
| Debian 8 | gst-plugins-bad1.0 | 1.4.4-2.1+deb8u2 |
| Red Hat Enterprise Linux 7 | clutter-gst2 | 0:2.0.18-1.el7 |
| Red Hat Enterprise Linux 7 | clutter-gst2-debuginfo | 0:2.0.18-1.el7 |
| Red Hat Enterprise Linux 7 | clutter-gst2-devel | 0:2.0.18-1.el7 |
| Red Hat Enterprise Linux 7 | gnome-video-effects | 0:0.4.3-1.el7 |
| Red Hat Enterprise Linux 7 | gstreamer-plugins-bad-free | 0:0.10.23-23.el7 |
| Red Hat Enterprise Linux 7 | gstreamer-plugins-bad-free-debuginfo | 0:0.10.23-23.el7 |
| Red Hat Enterprise Linux 7 | gstreamer-plugins-bad-free-devel | 0:0.10.23-23.el7 |
| Red Hat Enterprise Linux 7 | gstreamer-plugins-bad-free-devel-docs | 0:0.10.23-23.el7 |
| Red Hat Enterprise Linux 7 | gstreamer-plugins-good | 0:0.10.31-13.el7 |
| Red Hat Enterprise Linux 7 | gstreamer-plugins-good-debuginfo | 0:0.10.31-13.el7 |
| Red Hat Enterprise Linux 7 | gstreamer-plugins-good-devel-docs | 0:0.10.31-13.el7 |
| Red Hat Enterprise Linux 7 | gstreamer1 | 0:1.10.4-2.el7 |
| Red Hat Enterprise Linux 7 | gstreamer1-debuginfo | 0:1.10.4-2.el7 |
| Red Hat Enterprise Linux 7 | gstreamer1-devel | 0:1.10.4-2.el7 |
| Red Hat Enterprise Linux 7 | gstreamer1-devel-docs | 0:1.10.4-2.el7 |
| Red Hat Enterprise Linux 7 | gstreamer1-plugins-bad-free | 0:1.10.4-2.el7 |
| Red Hat Enterprise Linux 7 | gstreamer1-plugins-bad-free-debuginfo | 0:1.10.4-2.el7 |
| Red Hat Enterprise Linux 7 | gstreamer1-plugins-bad-free-devel | 0:1.10.4-2.el7 |
| Red Hat Enterprise Linux 7 | gstreamer1-plugins-bad-free-gtk | 0:1.10.4-2.el7 |
| Red Hat Enterprise Linux 7 | gstreamer1-plugins-base | 0:1.10.4-1.el7 |
| Red Hat Enterprise Linux 7 | gstreamer1-plugins-base-debuginfo | 0:1.10.4-1.el7 |
| Red Hat Enterprise Linux 7 | gstreamer1-plugins-base-devel | 0:1.10.4-1.el7 |
| Red Hat Enterprise Linux 7 | gstreamer1-plugins-base-devel-docs | 0:1.10.4-1.el7 |
| Red Hat Enterprise Linux 7 | gstreamer1-plugins-base-tools | 0:1.10.4-1.el7 |
| Red Hat Enterprise Linux 7 | gstreamer1-plugins-good | 0:1.10.4-2.el7 |
| Red Hat Enterprise Linux 7 | gstreamer1-plugins-good-debuginfo | 0:1.10.4-2.el7 |
| Red Hat Enterprise Linux 7 | orc | 0:0.4.26-1.el7 |
| Red Hat Enterprise Linux 7 | orc-compiler | 0:0.4.26-1.el7 |
| Red Hat Enterprise Linux 7 | orc-debuginfo | 0:0.4.26-1.el7 |
| Red Hat Enterprise Linux 7 | orc-devel | 0:0.4.26-1.el7 |
| Red Hat Enterprise Linux 7 | orc-doc | 0:0.4.26-1.el7 |
| SUSE Linux Enterprise Desktop 12 SP2 | gstreamer-plugins-bad | 1.8.3-17.2 |
| SUSE Linux Enterprise Server 12 SP2 | gstreamer-plugins-bad | 1.8.3-17.2 |
| SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 | gstreamer-plugins-bad | 1.8.3-17.2 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | gstreamer-plugins-bad | 1.8.3-17.2 |
| SUSE Linux Enterprise Software Development Kit 12 SP2 | gstreamer-plugins-bad | 1.8.3-17.2 |
| Ubuntu Pro 14.04 LTS | gst-plugins-bad0.10 | 0.10.23-7.2ubuntu1.3+esm1 |
| Ubuntu Pro 14.04 LTS | gst-plugins-bad1.0 | no fix |
| Ubuntu Pro 16.04 LTS | gst-plugins-bad1.0 | no fix |
| openSUSE Tumbleweed | gstreamer-plugins-bad | 1.18.5-2.1 |