GStreamer before 1.16.0 has a heap-based buffer overflow in the RTSP connection parser via a crafted response from a server, potentially allowing remote code execution.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade gst-plugins-base | Mar 26, 2024 | Apr 24, 2019 |
| Debian | — | Upgrade gst-plugins-base1.0 | Apr 29, 2019 | Apr 24, 2019 |
| Gentoo Linux | — | Upgrade media-libs/gst-plugins-base. | Mar 16, 2020 | Apr 24, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade gstreamer1-plugins-base-develUpgrade gstreamer1-plugins-base | May 30, 2019 | Apr 24, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade gstreamer-plugins-base | May 30, 2019 | Apr 24, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade gstreamer1-plugins-baseUpgrade gstreamer1-plugins-base-devel | May 30, 2019 | Apr 24, 2019 |
| Oracle Solaris | — | Upgrade library/desktop/gstreamer-1 to version 1.16.2-11.4.21.0.1.69.0 on Solaris 11.4Upgrade library/desktop/gstreamer-1/gst-plugins-base to version 1.16.2-11.4.21.0.1.69.0 on Solaris 11.4Upgrade library/python/gst-python-1 to version 1.16.2-11.4.21.0.1.69.0 on Solaris 11.4Upgrade library/python/gst-python-1-37 to version 1.16.2-11.4.21.0.1.69.0 on Solaris 11.4Upgrade library/desktop/gstreamer-1/gst-plugins-good to version 1.16.2-11.4.21.0.1.69.0 on Solaris 11.4 | Jan 19, 2021 | Apr 24, 2019 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 24, 2019 |
| Suse | — | Upgrade libgstinterfaces-0_10-0-32bitUpgrade typelib-1_0-gstrtsp-1_0Upgrade gstreamer-plugins-base-docUpgrade libgstvideo-1_0-0Upgrade libgstapp-1_0-0Upgrade libgstaudio-1_0-0-32bitUpgrade libgstfft-1_0-0-32bitUpgrade gstreamer-plugins-base-langUpgrade libgstgl-1_0-0Upgrade gstreamer-0_10-plugins-baseUpgrade typelib-1_0-gstvideo-1_0Upgrade libgstsdp-1_0-0Upgrade typelib-1_0-GstInterfaces-0_10Upgrade libgsttag-1_0-0-32bitUpgrade typelib-1_0-gstsdp-1_0Upgrade libgstaudio-1_0-0Upgrade gstreamer-0_10-plugins-base-32bitUpgrade libgstvideo-1_0-0-32bitUpgrade gstreamer-plugins-base-devel-32bitUpgrade gstreamer-0_10-plugins-base-docUpgrade libgstpbutils-1_0-0-32bitUpgrade libgsttag-1_0-0Upgrade gstreamer-0_10-plugins-base-langUpgrade libgstallocators-1_0-0Upgrade gstreamer-plugins-baseUpgrade typelib-1_0-gstgl-1_0Upgrade libgstsdp-1_0-0-32bitUpgrade libgstrtsp-1_0-0-32bitUpgrade libgstfft-1_0-0Upgrade libgstapp-0_10-0-32bitUpgrade libgstrtsp-1_0-0Upgrade typelib-1_0-gstpbutils-1_0Upgrade typelib-1_0-gstapp-1_0Upgrade libgstpbutils-1_0-0Upgrade libgstinterfaces-0_10-0Upgrade libgstallocators-1_0-0-32bitUpgrade libgstrtp-1_0-0Upgrade gstreamer-plugins-base-develUpgrade libgstriff-1_0-0-32bitUpgrade gstreamer-0_10-plugins-base-develUpgrade gstreamer-plugins-base-32bitUpgrade typelib-1_0-gstaudio-1_0Upgrade typelib-1_0-GstApp-0_10Upgrade libgstapp-0_10-0Upgrade libgstrtp-1_0-0-32bitUpgrade typelib-1_0-gsttag-1_0Upgrade libgstapp-1_0-0-32bitUpgrade typelib-1_0-gstrtp-1_0Upgrade typelib-1_0-GstFft-1_0Upgrade typelib-1_0-gstallocators-1_0Upgrade libgstriff-1_0-0 | Jun 11, 2019 | Apr 24, 2019 |
| Ubuntu | — | Upgrade gstreamer0.10-plugins-baseUpgrade gstreamer1.0-plugins-base | May 4, 2019 | Apr 24, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub