Summary
Hanno Bock discovered that GStreamer incorrecly handled certain datetime
strings. An attacker could possibly use this issue to cause a denial
of service or expose sensitive information.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | gstreamer1.0 | 1.8.3-1~ubuntu0.1+esm1 |
Vulnerabilities 1
-
Unscored —
The gst_date_time_new_from_iso8601_string function in gst/gstdatetime.c in GStreamer before 1.10.3 allows remote attack…
References
-
report
https://ubuntu.com/security/CVE-2017-5838