The vmnc decoder in the gstreamer does not initialize the render canvas, which allows remote attackers to obtain sensitive information as demonstrated by thumbnailing a simple 1 frame vmnc movie that does not draw to the allocated render canvas.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jan 23, 2017 |
| Centos_linux | — | Upgrade clutter-gst2-debuginfoUpgrade gstreamer1-plugins-good-debuginfoUpgrade gstreamer1-plugins-bad-free-debuginfoUpgrade gstreamer1-plugins-bad-free-gtkUpgrade gstreamer-plugins-bad-free-debuginfoUpgrade gstreamer1-plugins-base-debuginfoUpgrade gstreamer-plugins-bad-free-develUpgrade gstreamer-plugins-bad-freeUpgrade orcUpgrade clutter-gst2-develUpgrade gstreamer1-develUpgrade gstreamer1-devel-docsUpgrade orc-docUpgrade gstreamer1-plugins-base-develUpgrade gstreamer1-plugins-base-toolsUpgrade gstreamer1-plugins-bad-free-develUpgrade gstreamer-plugins-good-debuginfoUpgrade gstreamer1-plugins-goodUpgrade gstreamer-plugins-good-devel-docsUpgrade gstreamer1-plugins-bad-freeUpgrade gstreamer1-debuginfoUpgrade orc-develUpgrade clutter-gst2Upgrade gstreamer-plugins-bad-free-devel-docsUpgrade gstreamer1-plugins-base-devel-docsUpgrade orc-compilerUpgrade orc-debuginfoUpgrade gnome-video-effectsUpgrade gstreamer1-plugins-baseUpgrade gstreamer1Upgrade gstreamer-plugins-good | Aug 28, 2019 | Jan 23, 2017 |
| Debian | — | Upgrade gst-plugins-bad1.0Upgrade gst-plugins-bad0.10 | Mar 31, 2017 | Nov 20, 2016 |
| Gentoo Linux | — | Upgrade media-libs/gst-plugins-good.Upgrade media-libs/gst-plugins-ugly.Upgrade media-libs/gst-plugins-bad.Upgrade media-libs/gst-plugins-base. | Oct 30, 2017 | Jan 23, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade gstreamer1-develUpgrade gstreamer1Upgrade gstreamer1-plugins-bad-freeUpgrade gstreamer-plugins-bad-free-devel-docsUpgrade gstreamer1-plugins-goodUpgrade gstreamer1-plugins-baseUpgrade gstreamer-plugins-goodUpgrade gstreamer1-plugins-base-toolsUpgrade gstreamer-plugins-bad-freeUpgrade gstreamer-plugins-bad-free-develUpgrade gstreamer1-plugins-base-devel | Nov 30, 2017 | Jan 23, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade gstreamer1-plugins-baseUpgrade gstreamer1-plugins-bad-freeUpgrade gstreamer1-develUpgrade gstreamer1-plugins-goodUpgrade gstreamer1-plugins-base-develUpgrade gstreamer1 | Nov 30, 2017 | Jan 23, 2017 |
| Oracle Solaris | — | Upgrade library/audio/gstreamer to version 0.10.32-0.175.3.0.0.26.0 on Solaris 11.3 | Oct 31, 2018 | Jan 23, 2017 |
| Oracle_linux | — | Upgrade gstreamer1-plugins-base-devel-docsUpgrade gstreamer1-plugins-goodUpgrade gstreamer-plugins-bad-free-devel-docsUpgrade gstreamer1-plugins-bad-free-develUpgrade orc-compilerUpgrade orcUpgrade gstreamer-plugins-bad-free-develUpgrade gstreamer1Upgrade clutter-gst2-develUpgrade gnome-video-effectsUpgrade clutter-gst2Upgrade gstreamer-plugins-goodUpgrade gstreamer-plugins-bad-freeUpgrade gstreamer1-plugins-base-toolsUpgrade gstreamer1-devel-docsUpgrade orc-docUpgrade gstreamer1-plugins-bad-freeUpgrade orc-develUpgrade gstreamer-plugins-good-devel-docsUpgrade gstreamer1-plugins-bad-free-gtkUpgrade gstreamer1-plugins-base-develUpgrade gstreamer1-plugins-baseUpgrade gstreamer1-devel | Aug 8, 2017 | Nov 15, 2016 |
| Redhat_linux | — | Upgrade gnome-video-effectsUpgrade gstreamer1-debuginfoUpgrade clutter-gst2Upgrade gstreamer-plugins-bad-free-develUpgrade gstreamer-plugins-bad-freeUpgrade gstreamer1-plugins-baseNo solution existsUpgrade gstreamer1-plugins-base-develUpgrade gstreamer1-plugins-bad-freeUpgrade gstreamer1-plugins-goodUpgrade gstreamer-plugins-goodUpgrade orc-compilerUpgrade orc-debuginfoUpgrade clutter-gst2-develUpgrade gstreamer1-plugins-good-debuginfoUpgrade gstreamer1-plugins-base-devel-docsUpgrade gstreamer1-plugins-base-toolsUpgrade gstreamer1-plugins-base-debuginfoUpgrade gstreamer1-plugins-bad-free-debuginfoUpgrade gstreamer1-plugins-bad-free-develUpgrade gstreamer-plugins-good-debuginfoUpgrade clutter-gst2-debuginfoUpgrade gstreamer1Upgrade gstreamer-plugins-bad-free-debuginfoUpgrade gstreamer1-develUpgrade orc-develUpgrade gstreamer-plugins-good-devel-docsUpgrade orc-docUpgrade gstreamer1-plugins-bad-free-gtkUpgrade gstreamer-plugins-bad-free-devel-docsUpgrade orcUpgrade gstreamer1-devel-docs | Aug 3, 2017 | Jan 23, 2017 |
| Suse | — | Upgrade libgstcodecparsers-0_10-23Upgrade libgsturidownloader-1_0-0Upgrade libgstegl-1_0-0Upgrade gstreamer-plugins-badUpgrade libgstbadbase-1_0-0Upgrade libgstadaptivedemux-1_0-0Upgrade libgstgl-1_0-0Upgrade libgstsignalprocessor-0_10-23-32bitUpgrade libgstbasecamerabinsrc-0_10-23Upgrade libgstbasevideo-0_10-23-32bitUpgrade libgstmpegts-1_0-0Upgrade libgstbasecamerabinsrc-1_0-0Upgrade libgstinsertbin-1_0-0Upgrade gstreamer-plugins-bad-develUpgrade libgstphotography-0_10-23Upgrade libgstbadvideo-1_0-0Upgrade libgstvdp-0_10-23-32bitUpgrade libgstphotography-1_0-0Upgrade libgstcodecparsers-1_0-0Upgrade libgstbasevideo-0_10-23Upgrade libgstphotography-0_10-23-32bitUpgrade gstreamer-0_10-plugins-bad-langUpgrade libgstvdp-0_10-23Upgrade libgstbadaudio-1_0-0Upgrade libgstsignalprocessor-0_10-23Upgrade libgstbasecamerabinsrc-0_10-23-32bitUpgrade gstreamer-plugins-bad-langUpgrade gstreamer-0_10-plugins-badUpgrade gstreamer-0_10-plugins-bad-devel | Dec 29, 2016 | Dec 29, 2016 |
| Ubuntu | — | Upgrade gst-plugins-bad1.0Upgrade gst-plugins-bad0.10 | Nov 19, 2024 | Jan 23, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub