The gst_date_time_new_from_iso8601_string function in gst/gstdatetime.c in GStreamer before 1.10.3 allows remote attackers to cause a denial of service (out-of-bounds heap read) via a malformed datetime string.
CVSS Details
- CVSS 3.0 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Feb 9, 2017 |
| Centos_linux | — | Upgrade gstreamer-plugins-good-debuginfoUpgrade gstreamer1-develUpgrade gstreamer-plugins-good-devel-docsUpgrade gstreamer-plugins-bad-free-devel-docsUpgrade gstreamer1Upgrade gstreamer1-plugins-baseUpgrade gstreamer1-plugins-base-develUpgrade gstreamer-plugins-bad-free-develUpgrade gstreamer1-devel-docsUpgrade gstreamer1-plugins-base-debuginfoUpgrade orc-docUpgrade clutter-gst2-debuginfoUpgrade gstreamer1-plugins-bad-freeUpgrade clutter-gst2Upgrade orc-debuginfoUpgrade gstreamer1-plugins-bad-free-gtkUpgrade gstreamer1-plugins-goodUpgrade gstreamer-plugins-goodUpgrade gstreamer1-plugins-bad-free-develUpgrade gstreamer1-plugins-bad-free-debuginfoUpgrade orcUpgrade gstreamer1-debuginfoUpgrade gstreamer-plugins-bad-free-debuginfoUpgrade clutter-gst2-develUpgrade gstreamer1-plugins-base-toolsUpgrade gstreamer1-plugins-good-debuginfoUpgrade gstreamer-plugins-bad-freeUpgrade orc-compilerUpgrade gnome-video-effectsUpgrade gstreamer1-plugins-base-devel-docsUpgrade orc-devel | Aug 28, 2019 | Feb 9, 2017 |
| Debian | — | Upgrade gstreamer1.0 | Mar 28, 2017 | Feb 9, 2017 |
| Gentoo Linux | — | Upgrade media-libs/gst-plugins-bad.Upgrade media-libs/gst-plugins-base.Upgrade media-libs/gst-plugins-good.Upgrade media-libs/gst-plugins-ugly. | Oct 30, 2017 | Feb 9, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade gstreamer1-develUpgrade gstreamer-plugins-bad-freeUpgrade gstreamer1-plugins-base-toolsUpgrade gstreamer-plugins-goodUpgrade gstreamer1-plugins-base-develUpgrade gstreamer-plugins-bad-free-devel-docsUpgrade gstreamer1-plugins-baseUpgrade gstreamer1Upgrade gstreamer1-plugins-goodUpgrade gstreamer1-plugins-bad-freeUpgrade gstreamer-plugins-bad-free-devel | Nov 30, 2017 | Feb 9, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade gstreamer1-plugins-bad-freeUpgrade gstreamer1-plugins-goodUpgrade gstreamer1-develUpgrade gstreamer1-plugins-base-develUpgrade gstreamer1Upgrade gstreamer1-plugins-base | Nov 30, 2017 | Feb 9, 2017 |
| Oracle Solaris | — | Upgrade entire/ to version 11.4-11.4.0.0.1.15.0 on Solaris 11.4Upgrade library/audio/gstreamer to version 0.10.32-0.175.3.0.0.26.0 on Solaris 11.3 | Oct 19, 2018 | Feb 9, 2017 |
| Oracle_linux | — | Upgrade gstreamer1-develUpgrade gstreamer1-plugins-base-toolsUpgrade gstreamer1-plugins-bad-free-develUpgrade gstreamer-plugins-bad-freeUpgrade gstreamer1-plugins-bad-free-gtkUpgrade orc-docUpgrade clutter-gst2-develUpgrade gstreamer1-devel-docsUpgrade gstreamer1-plugins-goodUpgrade gstreamer-plugins-good-devel-docsUpgrade orcUpgrade gstreamer1-plugins-base-develUpgrade gstreamer1Upgrade gstreamer-plugins-bad-free-develUpgrade clutter-gst2Upgrade gstreamer1-plugins-bad-freeUpgrade gnome-video-effectsUpgrade gstreamer1-plugins-baseUpgrade gstreamer-plugins-goodUpgrade orc-develUpgrade gstreamer-plugins-bad-free-devel-docsUpgrade orc-compilerUpgrade gstreamer1-plugins-base-devel-docs | Aug 8, 2017 | Jan 15, 2016 |
| Redhat_linux | — | Upgrade gstreamer1-plugins-bad-free-develUpgrade gstreamer1-plugins-base-toolsUpgrade gstreamer1-plugins-goodUpgrade clutter-gst2-debuginfoUpgrade gstreamer1-plugins-base-devel-docsUpgrade gstreamer1-develUpgrade gstreamer-plugins-bad-free-debuginfoUpgrade orc-docUpgrade gstreamer-plugins-bad-free-develUpgrade clutter-gst2-develUpgrade gstreamer-plugins-bad-freeUpgrade gstreamer1-plugins-bad-free-debuginfoUpgrade gstreamer1-plugins-base-debuginfoUpgrade gstreamer1-plugins-bad-free-gtkUpgrade orcUpgrade gstreamer1-plugins-base-develUpgrade gstreamer1-devel-docsUpgrade gstreamer-plugins-good-devel-docsUpgrade gnome-video-effectsUpgrade clutter-gst2Upgrade gstreamer-plugins-goodUpgrade gstreamer1-plugins-good-debuginfoUpgrade gstreamer-plugins-good-debuginfoUpgrade orc-debuginfoUpgrade gstreamer1Upgrade gstreamer1-debuginfoUpgrade gstreamer1-plugins-bad-freeUpgrade gstreamer1-plugins-baseUpgrade orc-compilerUpgrade gstreamer-plugins-bad-free-devel-docsUpgrade orc-devel | Aug 3, 2017 | Feb 9, 2017 |
| Suse | — | Upgrade libgstcodecparsers-1_0-0Upgrade typelib-1_0-gstmpegts-1_0Upgrade gstreamer-plugins-good-langUpgrade libgstbadaudio-1_0-0Upgrade typelib-1_0-gst-1_0Upgrade gstreamer-plugins-goodUpgrade gstreamer-plugins-bad-langUpgrade libgstphotography-1_0-0Upgrade libgstsctp-1_0-0Upgrade gstreamer-develUpgrade libgstwayland-1_0-0Upgrade libgstbadvideo-1_0-0Upgrade libgstbadbase-1_0-0Upgrade gstreamerUpgrade libgstplayer-1_0-0Upgrade libgstinsertbin-1_0-0Upgrade gstreamer-plugins-bad-chromaprintUpgrade gstreamer-plugins-uglyUpgrade libgstbadallocators-1_0-0Upgrade libgstreamer-1_0-0Upgrade gstreamer-plugins-bad-develUpgrade libgstbasecamerabinsrc-1_0-0Upgrade typelib-1_0-gstgl-1_0Upgrade libgstmpegts-1_0-0Upgrade typelib-1_0-gstinsertbin-1_0Upgrade libgstadaptivedemux-1_0-0Upgrade libgsturidownloader-1_0-0Upgrade libgstreamer-1_0-0-32bitUpgrade gstreamer-utilsUpgrade gstreamer-plugins-ugly-langUpgrade gstreamer-plugins-badUpgrade typelib-1_0-gstbadallocators-1_0Upgrade libgstgl-1_0-0Upgrade libgstwebrtc-1_0-0Upgrade typelib-1_0-gstwebrtc-1_0Upgrade typelib-1_0-gstplayer-1_0Upgrade libgstisoff-1_0-0Upgrade gstreamer-lang | Mar 1, 2017 | Feb 9, 2017 |
| Ubuntu | — | Upgrade libgstreamer1.0-0 (Ubuntu Pro)Upgrade gstreamer1.0-tools (Ubuntu Pro) | Aug 17, 2023 | Feb 9, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub