The gst_riff_create_audio_caps function in gst-libs/gst/riff/riff-media.c in gst-plugins-base in GStreamer before 1.10.3 allows remote attackers to cause a denial of service (floating point exception and crash) via a crafted ASF file.
CVSS Details
- CVSS 3.0 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade gst-plugins-base1 | Sep 20, 2017 | Feb 9, 2017 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Feb 9, 2017 |
| Centos_linux | — | Upgrade orcUpgrade gstreamer1-devel-docsUpgrade gstreamer1-plugins-bad-free-develUpgrade gstreamer1-plugins-bad-free-gtkUpgrade orc-develUpgrade clutter-gst2-debuginfoUpgrade orc-docUpgrade gstreamer-plugins-goodUpgrade gstreamer1-plugins-good-debuginfoUpgrade clutter-gst2-develUpgrade gstreamer-plugins-good-debuginfoUpgrade gstreamer1-plugins-base-toolsUpgrade gstreamer1-plugins-base-develUpgrade gstreamer1-develUpgrade clutter-gst2Upgrade gstreamer-plugins-good-devel-docsUpgrade gstreamer1-plugins-bad-free-debuginfoUpgrade gstreamer1Upgrade gstreamer1-plugins-base-devel-docsUpgrade gstreamer-plugins-bad-free-debuginfoUpgrade gstreamer1-plugins-base-debuginfoUpgrade gstreamer1-plugins-baseUpgrade gstreamer1-plugins-bad-freeUpgrade gstreamer1-debuginfoUpgrade gstreamer-plugins-bad-free-develUpgrade orc-compilerUpgrade gnome-video-effectsUpgrade gstreamer1-plugins-goodUpgrade orc-debuginfoUpgrade gstreamer-plugins-bad-free-devel-docsUpgrade gstreamer-plugins-bad-free | Aug 28, 2019 | Feb 9, 2017 |
| Debian | — | Upgrade gst-plugins-base1.0Upgrade gst-plugins-base0.10 | Mar 28, 2017 | Feb 9, 2017 |
| Gentoo Linux | — | Upgrade media-libs/gst-plugins-ugly.Upgrade media-libs/gst-plugins-good.Upgrade media-libs/gst-plugins-bad.Upgrade media-libs/gst-plugins-base. | Oct 30, 2017 | Feb 9, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade gstreamer1-plugins-goodUpgrade gstreamer1-develUpgrade gstreamer-plugins-goodUpgrade gstreamer1-plugins-base-toolsUpgrade gstreamer1-plugins-bad-freeUpgrade gstreamer1-plugins-baseUpgrade gstreamer-plugins-bad-free-develUpgrade gstreamer1Upgrade gstreamer-plugins-bad-free-devel-docsUpgrade gstreamer-plugins-bad-freeUpgrade gstreamer1-plugins-base-devel | Nov 30, 2017 | Feb 9, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade gstreamer1-plugins-goodUpgrade gstreamer1-develUpgrade gstreamer1-plugins-bad-freeUpgrade gstreamer1-plugins-base-develUpgrade gstreamer1Upgrade gstreamer1-plugins-base | Nov 30, 2017 | Feb 9, 2017 |
| Oracle Solaris | — | Upgrade entire/ to version 11.4-11.4.0.0.1.15.0 on Solaris 11.4Upgrade library/audio/gstreamer to version 0.10.32-0.175.3.0.0.26.0 on Solaris 11.3 | Oct 19, 2018 | Feb 9, 2017 |
| Oracle_linux | — | Upgrade orc-compilerUpgrade orc-develUpgrade clutter-gst2Upgrade gstreamer1Upgrade gstreamer-plugins-goodUpgrade gstreamer1-plugins-bad-free-gtkUpgrade gstreamer-plugins-bad-free-develUpgrade gstreamer1-develUpgrade gstreamer1-plugins-base-toolsUpgrade orc-docUpgrade gstreamer1-plugins-base-develUpgrade orcUpgrade gstreamer-plugins-good-devel-docsUpgrade gstreamer1-devel-docsUpgrade gstreamer-plugins-bad-free-devel-docsUpgrade gstreamer1-plugins-goodUpgrade gstreamer1-plugins-baseUpgrade gstreamer1-plugins-bad-freeUpgrade gstreamer-plugins-bad-freeUpgrade gstreamer1-plugins-bad-free-develUpgrade clutter-gst2-develUpgrade gnome-video-effectsUpgrade gstreamer1-plugins-base-devel-docs | Aug 8, 2017 | Jan 20, 2017 |
| Redhat_linux | — | Upgrade gstreamer1-develUpgrade gstreamer1-plugins-base-develUpgrade gstreamer-plugins-goodUpgrade gstreamer1Upgrade gstreamer1-plugins-goodUpgrade gstreamer-plugins-bad-free-develUpgrade gstreamer1-plugins-good-debuginfoUpgrade gstreamer1-plugins-baseUpgrade clutter-gst2-debuginfoUpgrade orc-debuginfoUpgrade gstreamer1-plugins-bad-freeUpgrade clutter-gst2Upgrade gstreamer1-devel-docsUpgrade gstreamer-plugins-bad-free-devel-docsUpgrade gstreamer1-plugins-bad-free-gtkUpgrade gstreamer1-plugins-base-toolsUpgrade gstreamer-plugins-good-devel-docsUpgrade orc-docUpgrade gstreamer-plugins-bad-freeUpgrade gnome-video-effectsUpgrade gstreamer1-debuginfoUpgrade gstreamer-plugins-bad-free-debuginfoUpgrade gstreamer-plugins-good-debuginfoUpgrade clutter-gst2-develUpgrade gstreamer1-plugins-bad-free-develUpgrade orc-develUpgrade orcUpgrade orc-compilerUpgrade gstreamer1-plugins-bad-free-debuginfoUpgrade gstreamer1-plugins-base-devel-docsNo solution existsUpgrade gstreamer1-plugins-base-debuginfo | Aug 3, 2017 | Feb 9, 2017 |
| Suse | — | Upgrade libgstrtsp-1_0-0Upgrade typelib-1_0-gstsdp-1_0Upgrade libgstinterfaces-0_10-0-32bitUpgrade libgstapp-0_10-0-32bitUpgrade gstreamer-plugins-baseUpgrade libgstsdp-1_0-0Upgrade typelib-1_0-GstRiff-1_0Upgrade libgstreamer-1_0-0-32bitUpgrade libgstpbutils-1_0-0-32bitUpgrade libgstvideo-1_0-0Upgrade gstreamer-langUpgrade typelib-1_0-gstrtsp-1_0Upgrade typelib-1_0-gstpbutils-1_0Upgrade typelib-1_0-GstInterfaces-0_10Upgrade gstreamer-0_10-plugins-base-langUpgrade typelib-1_0-gstvideo-1_0Upgrade libgstfft-1_0-0-32bitUpgrade gstreamer-0_10-plugins-baseUpgrade typelib-1_0-gst-1_0Upgrade gstreamer-0_10-plugins-base-32bitUpgrade gstreamer-0_10-plugins-base-develUpgrade libgstvideo-1_0-0-32bitUpgrade libgstaudio-1_0-0Upgrade libgstapp-0_10-0Upgrade gstreamer-utilsUpgrade libgstapp-1_0-0Upgrade typelib-1_0-GstFft-1_0Upgrade libgstinterfaces-0_10-0Upgrade gstreamer-plugins-base-develUpgrade gstreamer-0_10-plugins-base-docUpgrade typelib-1_0-gsttag-1_0Upgrade typelib-1_0-gstallocators-1_0Upgrade gstreamer-plugins-base-langUpgrade libgstallocators-1_0-0Upgrade libgsttag-1_0-0Upgrade libgstaudio-1_0-0-32bitUpgrade libgstapp-1_0-0-32bitUpgrade typelib-1_0-gstrtp-1_0Upgrade libgstrtp-1_0-0Upgrade typelib-1_0-gstapp-1_0Upgrade libgsttag-1_0-0-32bitUpgrade typelib-1_0-GstApp-0_10Upgrade gstreamerUpgrade gstreamer-develUpgrade typelib-1_0-gstaudio-1_0Upgrade libgstfft-1_0-0Upgrade libgstreamer-1_0-0Upgrade libgstpbutils-1_0-0Upgrade libgstriff-1_0-0 | Mar 1, 2017 | Feb 9, 2017 |
| Ubuntu | — | Upgrade gstreamer0.10-plugins-baseUpgrade gstreamer1.0-plugins-base | Mar 28, 2017 | Feb 9, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub