The gst_ps_demux_parse_psm function in gst/mpegdemux/gstmpegdemux.c in gst-plugins-bad in GStreamer allows remote attackers to cause a denial of service (invalid memory read and crash) via vectors involving PSM parsing.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade gst-plugins-bad1 | Sep 20, 2017 | Feb 9, 2017 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Feb 9, 2017 |
| Centos_linux | — | Upgrade orc-docUpgrade gstreamer1-devel-docsUpgrade gstreamer-plugins-bad-freeUpgrade gstreamer1-plugins-baseUpgrade gstreamer-plugins-bad-free-develUpgrade gstreamer1Upgrade gstreamer1-plugins-bad-freeUpgrade clutter-gst2Upgrade gstreamer-plugins-bad-free-devel-docsUpgrade gstreamer1-plugins-base-toolsUpgrade gstreamer-plugins-goodUpgrade gstreamer1-develUpgrade gstreamer-plugins-good-devel-docsUpgrade clutter-gst2-debuginfoUpgrade orc-debuginfoUpgrade gstreamer1-plugins-base-develUpgrade gstreamer1-plugins-base-devel-docsUpgrade gstreamer1-plugins-goodUpgrade gnome-video-effectsUpgrade gstreamer1-plugins-bad-free-debuginfoUpgrade gstreamer1-plugins-bad-free-gtkUpgrade clutter-gst2-develUpgrade orc-develUpgrade gstreamer1-plugins-good-debuginfoUpgrade gstreamer1-plugins-bad-free-develUpgrade gstreamer-plugins-bad-free-debuginfoUpgrade orcUpgrade gstreamer1-debuginfoUpgrade gstreamer-plugins-good-debuginfoUpgrade gstreamer1-plugins-base-debuginfoUpgrade orc-compiler | Aug 28, 2019 | Feb 9, 2017 |
| Debian | — | Upgrade gst-plugins-bad0.10Upgrade gst-plugins-bad1.0 | Mar 28, 2017 | Feb 9, 2017 |
| Gentoo Linux | — | Upgrade media-libs/gst-plugins-ugly.Upgrade media-libs/gst-plugins-base.Upgrade media-libs/gst-plugins-good.Upgrade media-libs/gst-plugins-bad. | Oct 30, 2017 | Feb 9, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade gstreamer1-plugins-baseUpgrade gstreamer-plugins-goodUpgrade gstreamer1-plugins-base-develUpgrade gstreamer1-develUpgrade gstreamer1-plugins-base-toolsUpgrade gstreamer1-plugins-bad-freeUpgrade gstreamer-plugins-bad-freeUpgrade gstreamer1Upgrade gstreamer1-plugins-goodUpgrade gstreamer-plugins-bad-free-develUpgrade gstreamer-plugins-bad-free-devel-docs | Nov 30, 2017 | Feb 9, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade gstreamer1-plugins-goodUpgrade gstreamer1Upgrade gstreamer1-plugins-base-develUpgrade gstreamer1-plugins-bad-freeUpgrade gstreamer1-develUpgrade gstreamer1-plugins-base | Nov 30, 2017 | Feb 9, 2017 |
| Oracle_linux | — | Upgrade gstreamer1-plugins-bad-freeUpgrade gstreamer1-plugins-baseUpgrade gstreamer1-plugins-base-devel-docsUpgrade gstreamer-plugins-bad-free-develUpgrade gstreamer1-plugins-goodUpgrade clutter-gst2-develUpgrade orc-compilerUpgrade gnome-video-effectsUpgrade orc-docUpgrade orc-develUpgrade gstreamer1-plugins-bad-free-gtkUpgrade clutter-gst2Upgrade orcUpgrade gstreamer1-develUpgrade gstreamer1-plugins-bad-free-develUpgrade gstreamer1Upgrade gstreamer1-plugins-base-toolsUpgrade gstreamer-plugins-goodUpgrade gstreamer1-devel-docsUpgrade gstreamer-plugins-bad-freeUpgrade gstreamer-plugins-bad-free-devel-docsUpgrade gstreamer-plugins-good-devel-docsUpgrade gstreamer1-plugins-base-devel | Aug 8, 2017 | Jan 30, 2016 |
| Redhat_linux | — | Upgrade gstreamer1-plugins-baseNo solution existsUpgrade gnome-video-effectsUpgrade gstreamer1-plugins-goodUpgrade gstreamer1-plugins-bad-freeUpgrade orc-compilerUpgrade gstreamer1-debuginfoUpgrade gstreamer-plugins-good-devel-docsUpgrade gstreamer-plugins-bad-freeUpgrade gstreamer1-plugins-base-develUpgrade gstreamer1-plugins-base-toolsUpgrade orc-docUpgrade gstreamer-plugins-bad-free-develUpgrade clutter-gst2Upgrade gstreamer-plugins-goodUpgrade orc-develUpgrade gstreamer1-develUpgrade gstreamer1-plugins-bad-free-debuginfoUpgrade orcUpgrade gstreamer1-plugins-good-debuginfoUpgrade gstreamer1-plugins-bad-free-gtkUpgrade clutter-gst2-debuginfoUpgrade clutter-gst2-develUpgrade gstreamer1-plugins-base-devel-docsUpgrade gstreamer-plugins-good-debuginfoUpgrade orc-debuginfoUpgrade gstreamer1-devel-docsUpgrade gstreamer-plugins-bad-free-debuginfoUpgrade gstreamer1Upgrade gstreamer1-plugins-bad-free-develUpgrade gstreamer-plugins-bad-free-devel-docsUpgrade gstreamer1-plugins-base-debuginfo | Aug 3, 2017 | Feb 9, 2017 |
| Suse | — | Upgrade libgstwayland-1_0-0Upgrade libgstplayer-1_0-0Upgrade libgstbadallocators-1_0-0Upgrade gstreamer-plugins-bad-develUpgrade libgstadaptivedemux-1_0-0Upgrade gstreamerUpgrade typelib-1_0-gst-1_0Upgrade gstreamer-utilsUpgrade libgstcodecparsers-1_0-0Upgrade libgstwebrtc-1_0-0Upgrade libgstmpegts-1_0-0Upgrade typelib-1_0-gstbadallocators-1_0Upgrade libgstgl-1_0-0Upgrade libgstbadaudio-1_0-0Upgrade gstreamer-plugins-bad-chromaprintUpgrade libgstisoff-1_0-0Upgrade libgstphotography-1_0-0Upgrade libgsturidownloader-1_0-0Upgrade libgstbasecamerabinsrc-1_0-0Upgrade typelib-1_0-gstplayer-1_0Upgrade typelib-1_0-gstmpegts-1_0Upgrade libgstreamer-1_0-0-32bitUpgrade typelib-1_0-gstgl-1_0Upgrade libgstsctp-1_0-0Upgrade typelib-1_0-gstwebrtc-1_0Upgrade gstreamer-langUpgrade libgstbadbase-1_0-0Upgrade gstreamer-plugins-badUpgrade libgstbadvideo-1_0-0Upgrade libgstinsertbin-1_0-0Upgrade typelib-1_0-gstinsertbin-1_0Upgrade gstreamer-plugins-bad-langUpgrade libgstreamer-1_0-0Upgrade gstreamer-devel | Apr 10, 2017 | Feb 9, 2017 |
| Ubuntu | — | Upgrade gst-plugins-bad0.10 (Ubuntu Pro) | Nov 19, 2024 | Feb 9, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub