The gst_riff_create_audio_caps function in gst-libs/gst/riff/riff-media.c in gst-plugins-base in GStreamer before 1.10.3 allows remote attackers to cause a denial of service (floating point exception and crash) via a crafted video file.
CVSS Details
- CVSS 3.0 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade gst-plugins-base1 | Sep 20, 2017 | Feb 9, 2017 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Feb 9, 2017 |
| Centos_linux | — | Upgrade gstreamer1-develUpgrade gstreamer-plugins-good-devel-docsUpgrade gstreamer-plugins-goodUpgrade orc-develUpgrade orc-docUpgrade gstreamer1-plugins-base-toolsUpgrade gstreamer1-plugins-baseUpgrade gstreamer-plugins-bad-freeUpgrade gstreamer1-plugins-base-develUpgrade clutter-gst2-debuginfoUpgrade clutter-gst2Upgrade gstreamer1-devel-docsUpgrade gstreamer1-plugins-good-debuginfoUpgrade gstreamer1-plugins-bad-free-debuginfoUpgrade gstreamer-plugins-good-debuginfoUpgrade orcUpgrade orc-debuginfoUpgrade gnome-video-effectsUpgrade gstreamer-plugins-bad-free-debuginfoUpgrade gstreamer1-plugins-base-devel-docsUpgrade gstreamer1Upgrade orc-compilerUpgrade gstreamer1-debuginfoUpgrade gstreamer1-plugins-bad-free-gtkUpgrade gstreamer-plugins-bad-free-devel-docsUpgrade gstreamer1-plugins-bad-free-develUpgrade gstreamer1-plugins-bad-freeUpgrade gstreamer-plugins-bad-free-develUpgrade clutter-gst2-develUpgrade gstreamer1-plugins-base-debuginfoUpgrade gstreamer1-plugins-good | Aug 28, 2019 | Feb 9, 2017 |
| Debian | — | Upgrade gst-plugins-base0.10Upgrade gst-plugins-base1.0 | Mar 28, 2017 | Feb 9, 2017 |
| Gentoo Linux | — | Upgrade media-libs/gst-plugins-base.Upgrade media-libs/gst-plugins-ugly.Upgrade media-libs/gst-plugins-bad.Upgrade media-libs/gst-plugins-good. | Oct 30, 2017 | Feb 9, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade gstreamer1Upgrade gstreamer1-plugins-goodUpgrade gstreamer-plugins-goodUpgrade gstreamer1-plugins-baseUpgrade gstreamer-plugins-bad-freeUpgrade gstreamer-plugins-bad-free-develUpgrade gstreamer1-plugins-base-toolsUpgrade gstreamer-plugins-bad-free-devel-docsUpgrade gstreamer1-plugins-bad-freeUpgrade gstreamer1-develUpgrade gstreamer1-plugins-base-devel | Nov 30, 2017 | Feb 9, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade gstreamer1-develUpgrade gstreamer1Upgrade gstreamer1-plugins-bad-freeUpgrade gstreamer1-plugins-goodUpgrade gstreamer1-plugins-baseUpgrade gstreamer1-plugins-base-devel | Nov 30, 2017 | Feb 9, 2017 |
| Oracle_linux | — | Upgrade gstreamer1-plugins-base-develUpgrade gstreamer1-plugins-bad-freeUpgrade gstreamer1-plugins-bad-free-develUpgrade gnome-video-effectsUpgrade orcUpgrade gstreamer1-plugins-base-devel-docsUpgrade clutter-gst2-develUpgrade orc-compilerUpgrade orc-develUpgrade gstreamer1-plugins-goodUpgrade gstreamer-plugins-bad-free-devel-docsUpgrade orc-docUpgrade gstreamer-plugins-good-devel-docsUpgrade gstreamer1Upgrade gstreamer1-devel-docsUpgrade gstreamer1-plugins-base-toolsUpgrade gstreamer1-plugins-bad-free-gtkUpgrade gstreamer1-plugins-baseUpgrade gstreamer-plugins-goodUpgrade gstreamer1-develUpgrade clutter-gst2Upgrade gstreamer-plugins-bad-free-develUpgrade gstreamer-plugins-bad-free | Aug 8, 2017 | Jan 15, 2017 |
| Redhat_linux | — | No solution existsUpgrade orcUpgrade orc-develUpgrade gstreamer1-plugins-base-develUpgrade orc-debuginfoUpgrade gnome-video-effectsUpgrade gstreamer-plugins-bad-free-devel-docsUpgrade gstreamer1-plugins-good-debuginfoUpgrade gstreamer1-plugins-baseUpgrade gstreamer1-debuginfoUpgrade gstreamer1Upgrade gstreamer1-plugins-bad-free-debuginfoUpgrade gstreamer1-plugins-base-debuginfoUpgrade gstreamer1-plugins-bad-free-develUpgrade gstreamer1-plugins-bad-freeUpgrade gstreamer-plugins-good-devel-docsUpgrade orc-docUpgrade gstreamer-plugins-good-debuginfoUpgrade gstreamer-plugins-bad-freeUpgrade gstreamer1-devel-docsUpgrade clutter-gst2-develUpgrade gstreamer-plugins-bad-free-develUpgrade gstreamer1-develUpgrade orc-compilerUpgrade gstreamer1-plugins-base-toolsUpgrade gstreamer-plugins-bad-free-debuginfoUpgrade clutter-gst2-debuginfoUpgrade gstreamer1-plugins-bad-free-gtkUpgrade gstreamer-plugins-goodUpgrade gstreamer1-plugins-goodUpgrade gstreamer1-plugins-base-devel-docsUpgrade clutter-gst2 | Aug 3, 2017 | Feb 9, 2017 |
| Suse | — | Upgrade gstreamer-0_10-plugins-base-32bitUpgrade gstreamer-0_10-plugins-base-docUpgrade typelib-1_0-gstrtsp-1_0Upgrade gstreamer-utilsUpgrade libgstrtp-1_0-0Upgrade gstreamer-0_10-plugins-base-develUpgrade gstreamerUpgrade typelib-1_0-gstaudio-1_0Upgrade gstreamer-plugins-baseUpgrade libgstvideo-1_0-0Upgrade libgstinterfaces-0_10-0-32bitUpgrade typelib-1_0-gst-1_0Upgrade typelib-1_0-GstApp-0_10Upgrade libgstallocators-1_0-0Upgrade libgstapp-1_0-0Upgrade libgstrtsp-1_0-0Upgrade typelib-1_0-gsttag-1_0Upgrade typelib-1_0-gstpbutils-1_0Upgrade libgstpbutils-1_0-0-32bitUpgrade libgstinterfaces-0_10-0Upgrade libgstaudio-1_0-0-32bitUpgrade typelib-1_0-GstRiff-1_0Upgrade libgstsdp-1_0-0Upgrade gstreamer-plugins-base-langUpgrade libgstpbutils-1_0-0Upgrade libgstapp-0_10-0-32bitUpgrade gstreamer-0_10-plugins-baseUpgrade libgstaudio-1_0-0Upgrade libgstapp-1_0-0-32bitUpgrade libgstapp-0_10-0Upgrade libgsttag-1_0-0Upgrade gstreamer-develUpgrade libgsttag-1_0-0-32bitUpgrade gstreamer-langUpgrade libgstriff-1_0-0Upgrade typelib-1_0-GstFft-1_0Upgrade libgstreamer-1_0-0Upgrade typelib-1_0-gstallocators-1_0Upgrade typelib-1_0-GstInterfaces-0_10Upgrade typelib-1_0-gstvideo-1_0Upgrade libgstfft-1_0-0-32bitUpgrade libgstfft-1_0-0Upgrade libgstreamer-1_0-0-32bitUpgrade typelib-1_0-gstrtp-1_0Upgrade gstreamer-plugins-base-develUpgrade typelib-1_0-gstsdp-1_0Upgrade typelib-1_0-gstapp-1_0Upgrade gstreamer-0_10-plugins-base-langUpgrade libgstvideo-1_0-0-32bit | Mar 1, 2017 | Feb 9, 2017 |
| Ubuntu | — | Upgrade gstreamer1.0-plugins-baseUpgrade gstreamer0.10-plugins-base | Mar 28, 2017 | Feb 9, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub