The gst_date_time_new_from_iso8601_string function in gst/gstdatetime.c in GStreamer before 1.10.3 allows remote attackers to cause a denial of service (out-of-bounds heap read) via a malformed datetime string.
CVSS Details
- CVSS 3.0 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Feb 9, 2017 |
| Centos_linux | — | Upgrade gstreamer-plugins-goodUpgrade gstreamer1-plugins-base-develUpgrade orc-debuginfoUpgrade gstreamer-plugins-good-debuginfoUpgrade gstreamer1-plugins-base-debuginfoUpgrade orc-docUpgrade gstreamer1-plugins-goodUpgrade gstreamer1-devel-docsUpgrade clutter-gst2Upgrade clutter-gst2-debuginfoUpgrade gstreamer-plugins-good-devel-docsUpgrade gstreamer1-plugins-bad-free-gtkUpgrade gstreamer-plugins-bad-free-devel-docsUpgrade gstreamer-plugins-bad-free-develUpgrade gstreamer1-plugins-baseUpgrade gstreamer1-develUpgrade gstreamer1Upgrade gstreamer1-plugins-bad-freeUpgrade gnome-video-effectsUpgrade orc-develUpgrade gstreamer-plugins-bad-freeUpgrade gstreamer1-plugins-bad-free-debuginfoUpgrade orcUpgrade orc-compilerUpgrade gstreamer1-plugins-bad-free-develUpgrade gstreamer-plugins-bad-free-debuginfoUpgrade gstreamer1-debuginfoUpgrade clutter-gst2-develUpgrade gstreamer1-plugins-base-devel-docsUpgrade gstreamer1-plugins-good-debuginfoUpgrade gstreamer1-plugins-base-tools | Aug 28, 2019 | Feb 9, 2017 |
| Debian | — | Upgrade gstreamer1.0 | Mar 28, 2017 | Feb 9, 2017 |
| Gentoo Linux | — | Upgrade media-libs/gst-plugins-ugly.Upgrade media-libs/gst-plugins-bad.Upgrade media-libs/gst-plugins-base.Upgrade media-libs/gst-plugins-good. | Oct 30, 2017 | Feb 9, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade gstreamer1-develUpgrade gstreamer1-plugins-base-toolsUpgrade gstreamer-plugins-bad-freeUpgrade gstreamer1-plugins-base-develUpgrade gstreamer-plugins-goodUpgrade gstreamer-plugins-bad-free-develUpgrade gstreamer1-plugins-bad-freeUpgrade gstreamer1Upgrade gstreamer1-plugins-goodUpgrade gstreamer-plugins-bad-free-devel-docsUpgrade gstreamer1-plugins-base | Nov 30, 2017 | Feb 9, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade gstreamer1Upgrade gstreamer1-plugins-goodUpgrade gstreamer1-plugins-bad-freeUpgrade gstreamer1-develUpgrade gstreamer1-plugins-base-develUpgrade gstreamer1-plugins-base | Nov 30, 2017 | Feb 9, 2017 |
| Oracle Solaris | — | Upgrade library/audio/gstreamer to version 0.10.32-0.175.3.0.0.26.0 on Solaris 11.3Upgrade entire/ to version 11.4-11.4.0.0.1.15.0 on Solaris 11.4 | Oct 19, 2018 | Feb 9, 2017 |
| Oracle_linux | — | Upgrade gstreamer1Upgrade gstreamer-plugins-bad-free-develUpgrade orc-docUpgrade gstreamer1-devel-docsUpgrade gstreamer1-develUpgrade orcUpgrade clutter-gst2-develUpgrade gstreamer1-plugins-base-develUpgrade gstreamer1-plugins-goodUpgrade gstreamer1-plugins-base-toolsUpgrade gstreamer-plugins-good-devel-docsUpgrade gstreamer1-plugins-bad-free-develUpgrade gstreamer-plugins-bad-freeUpgrade gstreamer1-plugins-bad-free-gtkUpgrade gnome-video-effectsUpgrade gstreamer-plugins-goodUpgrade orc-develUpgrade orc-compilerUpgrade gstreamer-plugins-bad-free-devel-docsUpgrade gstreamer1-plugins-baseUpgrade gstreamer1-plugins-bad-freeUpgrade clutter-gst2Upgrade gstreamer1-plugins-base-devel-docs | Aug 8, 2017 | Jan 15, 2016 |
| Redhat_linux | — | Upgrade gstreamer1-plugins-bad-freeUpgrade gstreamer-plugins-bad-free-devel-docsUpgrade gstreamer1Upgrade gstreamer1-debuginfoUpgrade gstreamer-plugins-goodUpgrade gstreamer1-plugins-baseUpgrade clutter-gst2Upgrade orc-compilerUpgrade gstreamer1-plugins-good-debuginfoUpgrade gnome-video-effectsUpgrade gstreamer-plugins-good-debuginfoUpgrade orc-develUpgrade orc-debuginfoUpgrade gstreamer1-plugins-base-toolsUpgrade clutter-gst2-debuginfoUpgrade gstreamer1-plugins-base-devel-docsUpgrade orcUpgrade clutter-gst2-develUpgrade gstreamer-plugins-bad-freeUpgrade gstreamer1-plugins-base-develUpgrade gstreamer-plugins-bad-free-debuginfoUpgrade orc-docUpgrade gstreamer1-plugins-bad-free-develUpgrade gstreamer1-develUpgrade gstreamer1-plugins-goodUpgrade gstreamer1-plugins-bad-free-gtkUpgrade gstreamer1-plugins-bad-free-debuginfoUpgrade gstreamer-plugins-good-devel-docsUpgrade gstreamer1-plugins-base-debuginfoUpgrade gstreamer1-devel-docsUpgrade gstreamer-plugins-bad-free-devel | Aug 3, 2017 | Feb 9, 2017 |
| Suse | — | Upgrade typelib-1_0-gstbadallocators-1_0Upgrade gstreamer-plugins-badUpgrade libgstbasecamerabinsrc-1_0-0Upgrade libgstadaptivedemux-1_0-0Upgrade typelib-1_0-gstinsertbin-1_0Upgrade gstreamer-plugins-ugly-langUpgrade libgstisoff-1_0-0Upgrade libgstwebrtc-1_0-0Upgrade typelib-1_0-gstgl-1_0Upgrade gstreamer-langUpgrade typelib-1_0-gstplayer-1_0Upgrade libgstmpegts-1_0-0Upgrade libgsturidownloader-1_0-0Upgrade gstreamer-utilsUpgrade typelib-1_0-gstwebrtc-1_0Upgrade gstreamer-plugins-bad-develUpgrade libgstreamer-1_0-0-32bitUpgrade libgstgl-1_0-0Upgrade libgstplayer-1_0-0Upgrade gstreamer-plugins-bad-chromaprintUpgrade gstreamerUpgrade libgstcodecparsers-1_0-0Upgrade gstreamer-plugins-good-langUpgrade libgstbadbase-1_0-0Upgrade gstreamer-develUpgrade gstreamer-plugins-goodUpgrade libgstsctp-1_0-0Upgrade typelib-1_0-gst-1_0Upgrade libgstphotography-1_0-0Upgrade libgstreamer-1_0-0Upgrade libgstbadaudio-1_0-0Upgrade libgstbadvideo-1_0-0Upgrade gstreamer-plugins-bad-langUpgrade libgstwayland-1_0-0Upgrade typelib-1_0-gstmpegts-1_0Upgrade gstreamer-plugins-uglyUpgrade libgstbadallocators-1_0-0Upgrade libgstinsertbin-1_0-0 | Mar 1, 2017 | Feb 9, 2017 |
| Ubuntu | — | Upgrade gstreamer1.0-tools (Ubuntu Pro)Upgrade libgstreamer1.0-0 (Ubuntu Pro) | Aug 17, 2023 | Feb 9, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub