A stack buffer overflow vulnerability was found in GStreamer's DTLS plugin. During a DTLS handshake, the peer certificate Subject Distinguished Name is printed into a fixed-size 2048-byte stack buffer without bounds checking. A remote unauthenticated attacker can send a certificate with an oversized Subject DN that exceeds the buffer, causing a stack buffer overflow and process crash, resulting in denial of service.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade gstreamer1-plugins-bad-freeUpgrade gstreamer1-plugins-bad-free-devel | Jul 30, 2026 | Jul 29, 2026 |
| Amazon Linux Ami 2 | — | Upgrade gstreamer1-plugins-bad-free-develUpgrade gstreamer1-plugins-bad-free-debuginfoUpgrade gstreamer1-plugins-bad-free | Aug 5, 2026 | Aug 5, 2026 |
| Amazon_linux_2023 | — | Upgrade gstreamer1-plugins-bad-free-debuginfoUpgrade gstreamer1-plugins-bad-free-develUpgrade gstreamer1-plugins-bad-free-libs-debuginfoUpgrade gstreamer1-plugins-bad-free-debugsourceUpgrade gstreamer1-plugin-openh264Upgrade gstreamer1-plugins-bad-free-libsUpgrade gstreamer1-plugins-bad-freeUpgrade gstreamer1-plugin-openh264-debuginfo | Aug 10, 2026 | Jul 9, 2026 |
| Freebsd | — | Upgrade gstreamer1-plugins-goodUpgrade gstreamer1-plugins-badUpgrade gstreamer1-pluginsUpgrade gstreamer1-plugins-ugly | Jul 28, 2026 | Jul 24, 2026 |
| Redhat_linux | — | Upgrade gstreamer1-plugins-bad-free-libsNo solution existsUpgrade gstreamer1-plugins-bad-freeUpgrade gstreamer1-plugins-bad-free-debugsourceUpgrade gstreamer1-plugins-bad-free-libs-debuginfoUpgrade gstreamer1-plugins-bad-free-gtkUpgrade gstreamer1-plugins-bad-free-debuginfoUpgrade gstreamer1-plugins-bad-free-devel | Jul 17, 2026 | Jul 8, 2026 |
| Rocky_linux | — | Upgrade gstreamer1-plugins-bad-free-libs-debuginfoUpgrade gstreamer1-plugins-bad-free-debuginfoUpgrade gstreamer1-plugins-bad-free-libsUpgrade gstreamer1-plugins-bad-freeUpgrade gstreamer1-plugins-bad-free-debugsourceUpgrade gstreamer1-plugins-bad-free-devel | Jul 31, 2026 | Jul 30, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub