The vmnc decoder in the gstreamer does not initialize the render canvas, which allows remote attackers to obtain sensitive information as demonstrated by thumbnailing a simple 1 frame vmnc movie that does not draw to the allocated render canvas.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jan 23, 2017 |
| Centos_linux | — | Upgrade gstreamer1-plugins-bad-free-gtkUpgrade gstreamer-plugins-bad-freeUpgrade gstreamer1-plugins-base-debuginfoUpgrade gstreamer1-devel-docsUpgrade clutter-gst2-develUpgrade gstreamer-plugins-bad-free-debuginfoUpgrade gstreamer1-plugins-bad-free-debuginfoUpgrade gstreamer1-plugins-base-develUpgrade gstreamer-plugins-good-debuginfoUpgrade gstreamer1-plugins-base-toolsUpgrade orc-docUpgrade gstreamer1-develUpgrade gstreamer1-plugins-good-debuginfoUpgrade clutter-gst2-debuginfoUpgrade gstreamer-plugins-good-devel-docsUpgrade gstreamer1-plugins-goodUpgrade gstreamer-plugins-bad-free-develUpgrade gstreamer1-plugins-bad-free-develUpgrade orcUpgrade gstreamer-plugins-bad-free-devel-docsUpgrade gstreamer1-plugins-baseUpgrade gstreamer1-debuginfoUpgrade orc-compilerUpgrade gstreamer1-plugins-base-devel-docsUpgrade gnome-video-effectsUpgrade gstreamer1-plugins-bad-freeUpgrade clutter-gst2Upgrade gstreamer1Upgrade gstreamer-plugins-goodUpgrade orc-develUpgrade orc-debuginfo | Aug 28, 2019 | Jan 23, 2017 |
| Debian | — | Upgrade gst-plugins-bad0.10Upgrade gst-plugins-bad1.0 | Mar 31, 2017 | Nov 20, 2016 |
| Gentoo Linux | — | Upgrade media-libs/gst-plugins-bad.Upgrade media-libs/gst-plugins-good.Upgrade media-libs/gst-plugins-ugly.Upgrade media-libs/gst-plugins-base. | Oct 30, 2017 | Jan 23, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade gstreamer-plugins-bad-free-devel-docsUpgrade gstreamer1Upgrade gstreamer1-develUpgrade gstreamer1-plugins-bad-freeUpgrade gstreamer1-plugins-base-toolsUpgrade gstreamer1-plugins-goodUpgrade gstreamer1-plugins-baseUpgrade gstreamer-plugins-bad-free-develUpgrade gstreamer-plugins-bad-freeUpgrade gstreamer1-plugins-base-develUpgrade gstreamer-plugins-good | Nov 30, 2017 | Jan 23, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade gstreamer1-develUpgrade gstreamer1-plugins-base-develUpgrade gstreamer1-plugins-goodUpgrade gstreamer1Upgrade gstreamer1-plugins-bad-freeUpgrade gstreamer1-plugins-base | Nov 30, 2017 | Jan 23, 2017 |
| Oracle Solaris | — | Upgrade library/audio/gstreamer to version 0.10.32-0.175.3.0.0.26.0 on Solaris 11.3 | Oct 31, 2018 | Jan 23, 2017 |
| Oracle_linux | — | Upgrade gstreamer-plugins-bad-free-devel-docsUpgrade gstreamer1-plugins-bad-free-develUpgrade gnome-video-effectsUpgrade orc-compilerUpgrade clutter-gst2-develUpgrade orcUpgrade gstreamer-plugins-bad-free-develUpgrade gstreamer1Upgrade gstreamer1-plugins-goodUpgrade gstreamer1-plugins-base-devel-docsUpgrade gstreamer1-plugins-bad-freeUpgrade orc-docUpgrade gstreamer1-plugins-baseUpgrade clutter-gst2Upgrade gstreamer1-devel-docsUpgrade gstreamer1-plugins-bad-free-gtkUpgrade gstreamer-plugins-good-devel-docsUpgrade gstreamer1-develUpgrade gstreamer-plugins-goodUpgrade gstreamer-plugins-bad-freeUpgrade gstreamer1-plugins-base-develUpgrade orc-develUpgrade gstreamer1-plugins-base-tools | Aug 8, 2017 | Nov 15, 2016 |
| Redhat_linux | — | Upgrade gstreamer1-plugins-bad-free-develUpgrade orc-docUpgrade gstreamer-plugins-bad-free-devel-docsUpgrade clutter-gst2-develUpgrade gstreamer1-devel-docsUpgrade orc-develUpgrade gstreamer1-plugins-bad-free-gtkUpgrade gstreamer-plugins-good-devel-docsUpgrade orcUpgrade gstreamer1Upgrade gstreamer1-plugins-base-devel-docsUpgrade gstreamer1-plugins-base-toolsUpgrade gstreamer-plugins-bad-free-debuginfoUpgrade gstreamer1-plugins-good-debuginfoUpgrade clutter-gst2-debuginfoUpgrade gstreamer1-plugins-bad-free-debuginfoUpgrade gstreamer1-plugins-base-debuginfoUpgrade gstreamer-plugins-good-debuginfoUpgrade gstreamer1-develUpgrade orc-compilerUpgrade gstreamer-plugins-goodUpgrade gstreamer-plugins-bad-freeUpgrade orc-debuginfoUpgrade gstreamer1-plugins-bad-freeUpgrade gstreamer-plugins-bad-free-develUpgrade gstreamer1-debuginfoNo solution existsUpgrade gnome-video-effectsUpgrade gstreamer1-plugins-goodUpgrade gstreamer1-plugins-baseUpgrade gstreamer1-plugins-base-develUpgrade clutter-gst2 | Aug 3, 2017 | Jan 23, 2017 |
| Suse | — | Upgrade gstreamer-0_10-plugins-bad-langUpgrade gstreamer-plugins-bad-langUpgrade libgstphotography-0_10-23Upgrade libgstcodecparsers-1_0-0Upgrade libgstphotography-1_0-0Upgrade gstreamer-0_10-plugins-bad-develUpgrade gstreamer-0_10-plugins-badUpgrade libgstbasevideo-0_10-23Upgrade libgstvdp-0_10-23-32bitUpgrade libgstphotography-0_10-23-32bitUpgrade libgstbadvideo-1_0-0Upgrade libgstbasecamerabinsrc-0_10-23-32bitUpgrade libgstsignalprocessor-0_10-23Upgrade libgstbadaudio-1_0-0Upgrade libgstvdp-0_10-23Upgrade libgstadaptivedemux-1_0-0Upgrade libgstgl-1_0-0Upgrade libgstcodecparsers-0_10-23Upgrade libgstbasevideo-0_10-23-32bitUpgrade libgstinsertbin-1_0-0Upgrade libgstbasecamerabinsrc-1_0-0Upgrade gstreamer-plugins-bad-develUpgrade libgstegl-1_0-0Upgrade libgstbadbase-1_0-0Upgrade libgstsignalprocessor-0_10-23-32bitUpgrade gstreamer-plugins-badUpgrade libgstmpegts-1_0-0Upgrade libgsturidownloader-1_0-0Upgrade libgstbasecamerabinsrc-0_10-23 | Dec 29, 2016 | Dec 29, 2016 |
| Ubuntu | — | Upgrade gst-plugins-bad0.10Upgrade gst-plugins-bad1.0 | Nov 19, 2024 | Jan 23, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub