The vmnc decoder in the gstreamer does not initialize the render canvas, which allows remote attackers to obtain sensitive information as demonstrated by thumbnailing a simple 1 frame vmnc movie that does not draw to the allocated render canvas.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jan 23, 2017 |
| Centos_linux | — | Upgrade gstreamer-plugins-goodUpgrade gstreamer-plugins-bad-free-devel-docsUpgrade orc-debuginfoUpgrade gnome-video-effectsUpgrade gstreamer1-plugins-base-devel-docsUpgrade orc-develUpgrade gstreamer1Upgrade clutter-gst2Upgrade gstreamer1-plugins-bad-freeUpgrade gstreamer1-debuginfoUpgrade gstreamer1-plugins-baseUpgrade orc-compilerUpgrade gstreamer-plugins-good-debuginfoUpgrade gstreamer-plugins-bad-free-debuginfoUpgrade gstreamer1-develUpgrade gstreamer1-plugins-base-debuginfoUpgrade gstreamer1-devel-docsUpgrade clutter-gst2-develUpgrade gstreamer1-plugins-base-toolsUpgrade gstreamer-plugins-bad-freeUpgrade gstreamer1-plugins-goodUpgrade gstreamer1-plugins-bad-free-gtkUpgrade orcUpgrade gstreamer1-plugins-good-debuginfoUpgrade gstreamer1-plugins-bad-free-develUpgrade clutter-gst2-debuginfoUpgrade gstreamer1-plugins-base-develUpgrade gstreamer1-plugins-bad-free-debuginfoUpgrade gstreamer-plugins-good-devel-docsUpgrade orc-docUpgrade gstreamer-plugins-bad-free-devel | Aug 28, 2019 | Jan 23, 2017 |
| Debian | — | Upgrade gst-plugins-bad1.0Upgrade gst-plugins-bad0.10 | Mar 31, 2017 | Nov 20, 2016 |
| Gentoo Linux | — | Upgrade media-libs/gst-plugins-good.Upgrade media-libs/gst-plugins-ugly.Upgrade media-libs/gst-plugins-bad.Upgrade media-libs/gst-plugins-base. | Oct 30, 2017 | Jan 23, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade gstreamer-plugins-goodUpgrade gstreamer1-plugins-goodUpgrade gstreamer1-plugins-baseUpgrade gstreamer1-plugins-base-toolsUpgrade gstreamer-plugins-bad-freeUpgrade gstreamer1-plugins-base-develUpgrade gstreamer-plugins-bad-free-develUpgrade gstreamer-plugins-bad-free-devel-docsUpgrade gstreamer1-plugins-bad-freeUpgrade gstreamer1Upgrade gstreamer1-devel | Nov 30, 2017 | Jan 23, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade gstreamer1-develUpgrade gstreamer1-plugins-goodUpgrade gstreamer1-plugins-base-develUpgrade gstreamer1Upgrade gstreamer1-plugins-baseUpgrade gstreamer1-plugins-bad-free | Nov 30, 2017 | Jan 23, 2017 |
| Oracle Solaris | — | Upgrade library/audio/gstreamer to version 0.10.32-0.175.3.0.0.26.0 on Solaris 11.3 | Oct 31, 2018 | Jan 23, 2017 |
| Oracle_linux | — | Upgrade clutter-gst2Upgrade gstreamer-plugins-good-devel-docsUpgrade gstreamer1-develUpgrade gstreamer-plugins-goodUpgrade gstreamer1-plugins-bad-free-gtkUpgrade gstreamer1-plugins-base-develUpgrade orc-develUpgrade gstreamer1-devel-docsUpgrade gstreamer1-plugins-base-toolsUpgrade gstreamer1-plugins-baseUpgrade gstreamer-plugins-bad-freeUpgrade gstreamer1-plugins-bad-freeUpgrade orc-docUpgrade orc-compilerUpgrade gstreamer1-plugins-goodUpgrade gstreamer1-plugins-base-devel-docsUpgrade gstreamer1Upgrade gstreamer-plugins-bad-free-develUpgrade gstreamer-plugins-bad-free-devel-docsUpgrade orcUpgrade gnome-video-effectsUpgrade gstreamer1-plugins-bad-free-develUpgrade clutter-gst2-devel | Aug 8, 2017 | Nov 15, 2016 |
| Redhat_linux | — | Upgrade gnome-video-effectsUpgrade gstreamer-plugins-bad-freeUpgrade gstreamer-plugins-goodUpgrade orc-compilerUpgrade orc-debuginfoUpgrade gstreamer1-plugins-bad-freeNo solution existsUpgrade gstreamer1-plugins-base-develUpgrade gstreamer-plugins-bad-free-develUpgrade clutter-gst2Upgrade gstreamer1-plugins-baseUpgrade gstreamer1-debuginfoUpgrade gstreamer1-plugins-goodUpgrade clutter-gst2-debuginfoUpgrade gstreamer1-plugins-base-debuginfoUpgrade gstreamer1-plugins-bad-free-gtkUpgrade orcUpgrade gstreamer1-develUpgrade gstreamer1-plugins-base-devel-docsUpgrade gstreamer1-devel-docsUpgrade gstreamer-plugins-bad-free-debuginfoUpgrade gstreamer1Upgrade gstreamer-plugins-good-debuginfoUpgrade gstreamer1-plugins-base-toolsUpgrade clutter-gst2-develUpgrade gstreamer-plugins-good-devel-docsUpgrade gstreamer-plugins-bad-free-devel-docsUpgrade gstreamer1-plugins-good-debuginfoUpgrade gstreamer1-plugins-bad-free-debuginfoUpgrade gstreamer1-plugins-bad-free-develUpgrade orc-docUpgrade orc-devel | Aug 3, 2017 | Jan 23, 2017 |
| Suse | — | Upgrade gstreamer-0_10-plugins-bad-langUpgrade libgstvdp-0_10-23Upgrade libgstphotography-0_10-23-32bitUpgrade libgstsignalprocessor-0_10-23Upgrade libgstbasecamerabinsrc-0_10-23-32bitUpgrade gstreamer-plugins-bad-langUpgrade libgstbadvideo-1_0-0Upgrade gstreamer-0_10-plugins-bad-develUpgrade libgstcodecparsers-1_0-0Upgrade gstreamer-0_10-plugins-badUpgrade libgstbadaudio-1_0-0Upgrade libgstphotography-1_0-0Upgrade libgstvdp-0_10-23-32bitUpgrade libgstphotography-0_10-23Upgrade libgstbasevideo-0_10-23Upgrade libgstsignalprocessor-0_10-23-32bitUpgrade libgstmpegts-1_0-0Upgrade libgstbasecamerabinsrc-0_10-23Upgrade libgstbadbase-1_0-0Upgrade libgstbasevideo-0_10-23-32bitUpgrade gstreamer-plugins-bad-develUpgrade libgstinsertbin-1_0-0Upgrade libgstegl-1_0-0Upgrade gstreamer-plugins-badUpgrade libgstbasecamerabinsrc-1_0-0Upgrade libgstadaptivedemux-1_0-0Upgrade libgstgl-1_0-0Upgrade libgstcodecparsers-0_10-23Upgrade libgsturidownloader-1_0-0 | Dec 29, 2016 | Dec 29, 2016 |
| Ubuntu | — | Upgrade gst-plugins-bad1.0Upgrade gst-plugins-bad0.10 | Nov 19, 2024 | Jan 23, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub