The gst_date_time_new_from_iso8601_string function in gst/gstdatetime.c in GStreamer before 1.10.3 allows remote attackers to cause a denial of service (out-of-bounds heap read) via a malformed datetime string.
CVSS Details
- CVSS 3.0 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Feb 9, 2017 |
| Centos_linux | — | Upgrade gstreamer-plugins-bad-free-develUpgrade gstreamer-plugins-bad-free-devel-docsUpgrade orc-docUpgrade gstreamer1-plugins-goodUpgrade clutter-gst2Upgrade gstreamer1-develUpgrade gstreamer1-plugins-base-debuginfoUpgrade gstreamer1-plugins-bad-free-gtkUpgrade clutter-gst2-debuginfoUpgrade gstreamer1Upgrade gstreamer1-plugins-bad-freeUpgrade gstreamer1-devel-docsUpgrade gstreamer1-plugins-baseUpgrade orc-debuginfoUpgrade gstreamer-plugins-good-devel-docsUpgrade gstreamer1-plugins-base-develUpgrade gstreamer-plugins-good-debuginfoUpgrade gstreamer-plugins-goodUpgrade orcUpgrade gstreamer1-plugins-bad-free-debuginfoUpgrade gstreamer1-plugins-base-toolsUpgrade gstreamer1-plugins-bad-free-develUpgrade gnome-video-effectsUpgrade orc-compilerUpgrade clutter-gst2-develUpgrade orc-develUpgrade gstreamer1-debuginfoUpgrade gstreamer1-plugins-good-debuginfoUpgrade gstreamer-plugins-bad-free-debuginfoUpgrade gstreamer1-plugins-base-devel-docsUpgrade gstreamer-plugins-bad-free | Aug 28, 2019 | Feb 9, 2017 |
| Debian | — | Upgrade gstreamer1.0 | Mar 28, 2017 | Feb 9, 2017 |
| Gentoo Linux | — | Upgrade media-libs/gst-plugins-good.Upgrade media-libs/gst-plugins-base.Upgrade media-libs/gst-plugins-bad.Upgrade media-libs/gst-plugins-ugly. | Oct 30, 2017 | Feb 9, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade gstreamer1-plugins-baseUpgrade gstreamer1-plugins-goodUpgrade gstreamer-plugins-bad-free-develUpgrade gstreamer1Upgrade gstreamer1-plugins-bad-freeUpgrade gstreamer-plugins-bad-free-devel-docsUpgrade gstreamer1-plugins-base-develUpgrade gstreamer1-plugins-base-toolsUpgrade gstreamer-plugins-bad-freeUpgrade gstreamer-plugins-goodUpgrade gstreamer1-devel | Nov 30, 2017 | Feb 9, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade gstreamer1Upgrade gstreamer1-plugins-base-develUpgrade gstreamer1-plugins-baseUpgrade gstreamer1-develUpgrade gstreamer1-plugins-goodUpgrade gstreamer1-plugins-bad-free | Nov 30, 2017 | Feb 9, 2017 |
| Oracle Solaris | — | Upgrade entire/ to version 11.4-11.4.0.0.1.15.0 on Solaris 11.4Upgrade library/audio/gstreamer to version 0.10.32-0.175.3.0.0.26.0 on Solaris 11.3 | Oct 19, 2018 | Feb 9, 2017 |
| Oracle_linux | — | Upgrade clutter-gst2-develUpgrade gstreamer1-plugins-bad-free-gtkUpgrade gstreamer1-develUpgrade gstreamer1-plugins-base-develUpgrade gstreamer1-plugins-bad-free-develUpgrade orcUpgrade orc-docUpgrade gstreamer1Upgrade gstreamer1-plugins-goodUpgrade gstreamer1-plugins-base-toolsUpgrade gstreamer-plugins-bad-freeUpgrade gstreamer-plugins-bad-free-develUpgrade gstreamer-plugins-good-devel-docsUpgrade gstreamer1-devel-docsUpgrade gstreamer1-plugins-base-devel-docsUpgrade gstreamer1-plugins-baseUpgrade clutter-gst2Upgrade gstreamer-plugins-bad-free-devel-docsUpgrade orc-compilerUpgrade gstreamer-plugins-goodUpgrade orc-develUpgrade gstreamer1-plugins-bad-freeUpgrade gnome-video-effects | Aug 8, 2017 | Jan 15, 2016 |
| Redhat_linux | — | Upgrade gstreamer1-plugins-bad-free-debuginfoUpgrade gstreamer1-plugins-base-debuginfoUpgrade orc-docUpgrade gstreamer1-plugins-base-toolsUpgrade gstreamer1-plugins-bad-free-develUpgrade gstreamer-plugins-good-devel-docsUpgrade orcUpgrade gstreamer1-plugins-base-develUpgrade clutter-gst2-debuginfoUpgrade gstreamer-plugins-bad-free-debuginfoUpgrade gstreamer1-plugins-goodUpgrade gstreamer1-plugins-bad-free-gtkUpgrade gstreamer1-plugins-base-devel-docsUpgrade gstreamer1-devel-docsUpgrade gstreamer1-develUpgrade clutter-gst2-develUpgrade gstreamer-plugins-bad-free-develUpgrade gstreamer-plugins-bad-freeUpgrade orc-compilerUpgrade gstreamer-plugins-good-debuginfoUpgrade gstreamer1Upgrade gnome-video-effectsUpgrade gstreamer1-plugins-baseUpgrade clutter-gst2Upgrade gstreamer1-plugins-bad-freeUpgrade orc-develUpgrade gstreamer-plugins-goodUpgrade gstreamer1-plugins-good-debuginfoUpgrade orc-debuginfoUpgrade gstreamer1-debuginfoUpgrade gstreamer-plugins-bad-free-devel-docs | Aug 3, 2017 | Feb 9, 2017 |
| Suse | — | Upgrade libgstgl-1_0-0Upgrade typelib-1_0-gstwebrtc-1_0Upgrade libgsturidownloader-1_0-0Upgrade gstreamer-plugins-bad-develUpgrade gstreamer-langUpgrade gstreamer-plugins-badUpgrade libgstadaptivedemux-1_0-0Upgrade libgstreamer-1_0-0-32bitUpgrade typelib-1_0-gstbadallocators-1_0Upgrade gstreamer-plugins-ugly-langUpgrade typelib-1_0-gstplayer-1_0Upgrade libgstisoff-1_0-0Upgrade libgstwebrtc-1_0-0Upgrade typelib-1_0-gstinsertbin-1_0Upgrade libgstmpegts-1_0-0Upgrade typelib-1_0-gstgl-1_0Upgrade libgstbasecamerabinsrc-1_0-0Upgrade gstreamer-utilsUpgrade typelib-1_0-gst-1_0Upgrade gstreamer-plugins-goodUpgrade libgstbadvideo-1_0-0Upgrade libgstplayer-1_0-0Upgrade libgstbadbase-1_0-0Upgrade libgstwayland-1_0-0Upgrade libgstcodecparsers-1_0-0Upgrade gstreamer-develUpgrade libgstphotography-1_0-0Upgrade typelib-1_0-gstmpegts-1_0Upgrade gstreamer-plugins-good-langUpgrade gstreamerUpgrade libgstsctp-1_0-0Upgrade gstreamer-plugins-bad-langUpgrade libgstreamer-1_0-0Upgrade libgstbadallocators-1_0-0Upgrade libgstinsertbin-1_0-0Upgrade libgstbadaudio-1_0-0Upgrade gstreamer-plugins-bad-chromaprintUpgrade gstreamer-plugins-ugly | Mar 1, 2017 | Feb 9, 2017 |
| Ubuntu | — | Upgrade libgstreamer1.0-0 (Ubuntu Pro)Upgrade gstreamer1.0-tools (Ubuntu Pro) | Aug 17, 2023 | Feb 9, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub