The vmnc decoder in the gstreamer does not initialize the render canvas, which allows remote attackers to obtain sensitive information as demonstrated by thumbnailing a simple 1 frame vmnc movie that does not draw to the allocated render canvas.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jan 23, 2017 |
| Centos_linux | — | Upgrade orc-docUpgrade gstreamer-plugins-good-devel-docsUpgrade orcUpgrade gstreamer-plugins-bad-free-debuginfoUpgrade gstreamer1-plugins-base-toolsUpgrade gstreamer1-plugins-bad-free-gtkUpgrade gstreamer-plugins-bad-free-develUpgrade gstreamer1-plugins-good-debuginfoUpgrade gstreamer1-plugins-goodUpgrade gstreamer-plugins-bad-freeUpgrade gstreamer1-devel-docsUpgrade clutter-gst2-debuginfoUpgrade gstreamer1-plugins-base-develUpgrade gstreamer1-plugins-bad-free-debuginfoUpgrade gstreamer1-plugins-bad-free-develUpgrade gstreamer-plugins-good-debuginfoUpgrade clutter-gst2-develUpgrade gstreamer1-develUpgrade gstreamer1-plugins-base-debuginfoUpgrade orc-compilerUpgrade gnome-video-effectsUpgrade clutter-gst2Upgrade gstreamer1Upgrade gstreamer-plugins-bad-free-devel-docsUpgrade gstreamer-plugins-goodUpgrade gstreamer1-plugins-bad-freeUpgrade orc-debuginfoUpgrade orc-develUpgrade gstreamer1-debuginfoUpgrade gstreamer1-plugins-base-devel-docsUpgrade gstreamer1-plugins-base | Aug 28, 2019 | Jan 23, 2017 |
| Debian | — | Upgrade gst-plugins-bad0.10Upgrade gst-plugins-bad1.0 | Mar 31, 2017 | Nov 20, 2016 |
| Gentoo Linux | — | Upgrade media-libs/gst-plugins-base.Upgrade media-libs/gst-plugins-good.Upgrade media-libs/gst-plugins-bad.Upgrade media-libs/gst-plugins-ugly. | Oct 30, 2017 | Jan 23, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade gstreamer-plugins-bad-free-develUpgrade gstreamer-plugins-bad-freeUpgrade gstreamer1-plugins-goodUpgrade gstreamer1-plugins-baseUpgrade gstreamer-plugins-goodUpgrade gstreamer1-plugins-base-toolsUpgrade gstreamer1-plugins-base-develUpgrade gstreamer1Upgrade gstreamer1-develUpgrade gstreamer1-plugins-bad-freeUpgrade gstreamer-plugins-bad-free-devel-docs | Nov 30, 2017 | Jan 23, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade gstreamer1-plugins-base-develUpgrade gstreamer1-develUpgrade gstreamer1-plugins-goodUpgrade gstreamer1Upgrade gstreamer1-plugins-bad-freeUpgrade gstreamer1-plugins-base | Nov 30, 2017 | Jan 23, 2017 |
| Oracle Solaris | — | Upgrade library/audio/gstreamer to version 0.10.32-0.175.3.0.0.26.0 on Solaris 11.3 | Oct 31, 2018 | Jan 23, 2017 |
| Oracle_linux | — | Upgrade gstreamer-plugins-bad-freeUpgrade gstreamer1-plugins-base-develUpgrade gstreamer-plugins-good-devel-docsUpgrade gstreamer1-plugins-bad-free-gtkUpgrade gstreamer-plugins-goodUpgrade orc-develUpgrade gstreamer1-plugins-base-toolsUpgrade clutter-gst2Upgrade gstreamer1-develUpgrade gstreamer1-devel-docsUpgrade gstreamer1-plugins-baseUpgrade gstreamer1-plugins-bad-freeUpgrade orc-docUpgrade gstreamer1-plugins-base-devel-docsUpgrade orcUpgrade gstreamer1-plugins-bad-free-develUpgrade gstreamer-plugins-bad-free-devel-docsUpgrade orc-compilerUpgrade clutter-gst2-develUpgrade gstreamer1-plugins-goodUpgrade gnome-video-effectsUpgrade gstreamer-plugins-bad-free-develUpgrade gstreamer1 | Aug 8, 2017 | Nov 15, 2016 |
| Redhat_linux | — | No solution existsUpgrade gstreamer1-plugins-base-develUpgrade gstreamer1-debuginfoUpgrade gstreamer1-plugins-goodUpgrade gstreamer-plugins-bad-freeUpgrade gstreamer1-plugins-bad-freeUpgrade orc-debuginfoUpgrade gstreamer1-plugins-baseUpgrade gstreamer-plugins-goodUpgrade clutter-gst2Upgrade gnome-video-effectsUpgrade gstreamer-plugins-bad-free-develUpgrade orc-compilerUpgrade gstreamer-plugins-bad-free-debuginfoUpgrade clutter-gst2-develUpgrade gstreamer1-plugins-base-devel-docsUpgrade gstreamer1-develUpgrade orc-develUpgrade orc-docUpgrade gstreamer-plugins-good-devel-docsUpgrade gstreamer1-plugins-good-debuginfoUpgrade gstreamer1-plugins-base-toolsUpgrade gstreamer1-plugins-bad-free-develUpgrade gstreamer1-plugins-base-debuginfoUpgrade gstreamer-plugins-good-debuginfoUpgrade gstreamer1-plugins-bad-free-debuginfoUpgrade gstreamer1Upgrade gstreamer1-devel-docsUpgrade gstreamer-plugins-bad-free-devel-docsUpgrade gstreamer1-plugins-bad-free-gtkUpgrade clutter-gst2-debuginfoUpgrade orc | Aug 3, 2017 | Jan 23, 2017 |
| Suse | — | Upgrade libgstmpegts-1_0-0Upgrade libgstbasecamerabinsrc-0_10-23Upgrade gstreamer-plugins-badUpgrade libgstegl-1_0-0Upgrade gstreamer-plugins-bad-develUpgrade libgstsignalprocessor-0_10-23-32bitUpgrade libgsturidownloader-1_0-0Upgrade libgstinsertbin-1_0-0Upgrade libgstgl-1_0-0Upgrade libgstbadbase-1_0-0Upgrade libgstbasevideo-0_10-23-32bitUpgrade libgstadaptivedemux-1_0-0Upgrade libgstcodecparsers-0_10-23Upgrade libgstbasecamerabinsrc-1_0-0Upgrade libgstsignalprocessor-0_10-23Upgrade gstreamer-plugins-bad-langUpgrade libgstvdp-0_10-23Upgrade libgstbasevideo-0_10-23Upgrade libgstbadaudio-1_0-0Upgrade libgstcodecparsers-1_0-0Upgrade libgstphotography-0_10-23Upgrade libgstvdp-0_10-23-32bitUpgrade libgstbadvideo-1_0-0Upgrade libgstphotography-1_0-0Upgrade gstreamer-0_10-plugins-badUpgrade libgstbasecamerabinsrc-0_10-23-32bitUpgrade libgstphotography-0_10-23-32bitUpgrade gstreamer-0_10-plugins-bad-langUpgrade gstreamer-0_10-plugins-bad-devel | Dec 29, 2016 | Dec 29, 2016 |
| Ubuntu | — | Upgrade gst-plugins-bad1.0Upgrade gst-plugins-bad0.10 | Nov 19, 2024 | Jan 23, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub