CVE:CVE-2017-5848
CNNVD:CNNVD-201702-350
GStreamer是一个用于构建媒体处理组件的图形库。Bad Plug-ins是其中的一个代码审查和测试插件。
Gstreamer 1.10.3之前的版本中的Bad Plug-ins插件的gst/mpegdemux/gstmpegdemux.c文件的‘gst_ps_demux_parse_psm’函数存在安全漏洞。远程攻击者可利用该漏洞造成拒绝服务（无效内存读取和崩溃）。
solution:Upgrade gstreamer_project gstreamer to a higher version than 1.11.2,and avoid the version (,1.11.2); Upgrade debian debian_linux to a higher version than 8.0,9.0,and avoid the version 8.0,9.0; Upgrade redhat enterprise_linux_desktop to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_eus to a higher version than 7.4,7.5,7.6,7.7,and avoid the version 7.4,7.5,7.6,7.7; Upgrade redhat enterprise_linux_server to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_server_aus to a higher version than 7.4,7.6,7.7,and avoid the version 7.4,7.6,7.7; Upgrade redhat enterprise_linux_server_tus to a higher version than 7.6,7.7,and avoid the version 7.6,7.7; Upgrade redhat enterprise_linux_workstation to a higher version than 7.0,and avoid the version 7.0