The gst_date_time_new_from_iso8601_string function in gst/gstdatetime.c in GStreamer before 1.10.3 allows remote attackers to cause a denial of service (out-of-bounds heap read) via a malformed datetime string.
CVSS Details
- CVSS 3.0 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Arch Linux | arch-linux-upgrade-latest | Jul 11, 2025 | Feb 9, 2017 | |
| Centos_linux | — | centos-upgrade-clutter-gst2centos-upgrade-clutter-gst2-debuginfocentos-upgrade-clutter-gst2-develcentos-upgrade-gnome-video-effectscentos-upgrade-gstreamer-plugins-bad-freecentos-upgrade-gstreamer-plugins-bad-free-debuginfocentos-upgrade-gstreamer-plugins-bad-free-develcentos-upgrade-gstreamer-plugins-bad-free-devel-docscentos-upgrade-gstreamer-plugins-goodcentos-upgrade-gstreamer-plugins-good-debuginfocentos-upgrade-gstreamer-plugins-good-devel-docscentos-upgrade-gstreamer1centos-upgrade-gstreamer1-debuginfocentos-upgrade-gstreamer1-develcentos-upgrade-gstreamer1-devel-docscentos-upgrade-gstreamer1-plugins-bad-freecentos-upgrade-gstreamer1-plugins-bad-free-debuginfocentos-upgrade-gstreamer1-plugins-bad-free-develcentos-upgrade-gstreamer1-plugins-bad-free-gtkcentos-upgrade-gstreamer1-plugins-basecentos-upgrade-gstreamer1-plugins-base-debuginfocentos-upgrade-gstreamer1-plugins-base-develcentos-upgrade-gstreamer1-plugins-base-devel-docscentos-upgrade-gstreamer1-plugins-base-toolscentos-upgrade-gstreamer1-plugins-goodcentos-upgrade-gstreamer1-plugins-good-debuginfocentos-upgrade-orccentos-upgrade-orc-compilercentos-upgrade-orc-debuginfocentos-upgrade-orc-develcentos-upgrade-orc-doc | Aug 28, 2019 | Feb 9, 2017 |
| Debian | debian-upgrade-gstreamer1-0 | Mar 28, 2017 | Feb 9, 2017 | |
| Gentoo Linux | gentoo-linux-upgrade-media-libs-gst-plugins-badgentoo-linux-upgrade-media-libs-gst-plugins-basegentoo-linux-upgrade-media-libs-gst-plugins-goodgentoo-linux-upgrade-media-libs-gst-plugins-ugly | Oct 30, 2017 | Feb 9, 2017 | |
| Huawei Euleros 2_0_sp1 | huawei-euleros-2_0_sp1-upgrade-gstreamer-plugins-bad-freehuawei-euleros-2_0_sp1-upgrade-gstreamer-plugins-bad-free-develhuawei-euleros-2_0_sp1-upgrade-gstreamer-plugins-bad-free-devel-docshuawei-euleros-2_0_sp1-upgrade-gstreamer-plugins-goodhuawei-euleros-2_0_sp1-upgrade-gstreamer1huawei-euleros-2_0_sp1-upgrade-gstreamer1-develhuawei-euleros-2_0_sp1-upgrade-gstreamer1-plugins-bad-freehuawei-euleros-2_0_sp1-upgrade-gstreamer1-plugins-basehuawei-euleros-2_0_sp1-upgrade-gstreamer1-plugins-base-develhuawei-euleros-2_0_sp1-upgrade-gstreamer1-plugins-base-toolshuawei-euleros-2_0_sp1-upgrade-gstreamer1-plugins-good | Nov 30, 2017 | Feb 9, 2017 | |
| Huawei Euleros 2_0_sp2 | huawei-euleros-2_0_sp2-upgrade-gstreamer1huawei-euleros-2_0_sp2-upgrade-gstreamer1-develhuawei-euleros-2_0_sp2-upgrade-gstreamer1-plugins-bad-freehuawei-euleros-2_0_sp2-upgrade-gstreamer1-plugins-basehuawei-euleros-2_0_sp2-upgrade-gstreamer1-plugins-base-develhuawei-euleros-2_0_sp2-upgrade-gstreamer1-plugins-good | Nov 30, 2017 | Feb 9, 2017 | |
| Oracle Solaris | oracle-solaris-11-3-upgrade-library-audio-gstreamer-0-10-32-0-175-3-0-0-26-0oracle-solaris-11-4-upgrade-entire-11-4-11-4-0-0-1-15-0 | Oct 19, 2018 | Feb 9, 2017 | |
| Oracle_linux | — | oracle-linux-upgrade-clutter-gst2oracle-linux-upgrade-clutter-gst2-develoracle-linux-upgrade-gnome-video-effectsoracle-linux-upgrade-gstreamer1oracle-linux-upgrade-gstreamer1-develoracle-linux-upgrade-gstreamer1-devel-docsoracle-linux-upgrade-gstreamer1-plugins-bad-freeoracle-linux-upgrade-gstreamer1-plugins-bad-free-develoracle-linux-upgrade-gstreamer1-plugins-bad-free-gtkoracle-linux-upgrade-gstreamer1-plugins-baseoracle-linux-upgrade-gstreamer1-plugins-base-develoracle-linux-upgrade-gstreamer1-plugins-base-devel-docsoracle-linux-upgrade-gstreamer1-plugins-base-toolsoracle-linux-upgrade-gstreamer1-plugins-goodoracle-linux-upgrade-gstreamer-plugins-bad-freeoracle-linux-upgrade-gstreamer-plugins-bad-free-develoracle-linux-upgrade-gstreamer-plugins-bad-free-devel-docsoracle-linux-upgrade-gstreamer-plugins-goodoracle-linux-upgrade-gstreamer-plugins-good-devel-docsoracle-linux-upgrade-orcoracle-linux-upgrade-orc-compileroracle-linux-upgrade-orc-develoracle-linux-upgrade-orc-doc | Aug 8, 2017 | Jan 15, 2016 |
| Redhat_linux | — | redhat-upgrade-clutter-gst2redhat-upgrade-clutter-gst2-debuginforedhat-upgrade-clutter-gst2-develredhat-upgrade-gnome-video-effectsredhat-upgrade-gstreamer-plugins-bad-freeredhat-upgrade-gstreamer-plugins-bad-free-debuginforedhat-upgrade-gstreamer-plugins-bad-free-develredhat-upgrade-gstreamer-plugins-bad-free-devel-docsredhat-upgrade-gstreamer-plugins-goodredhat-upgrade-gstreamer-plugins-good-debuginforedhat-upgrade-gstreamer-plugins-good-devel-docsredhat-upgrade-gstreamer1redhat-upgrade-gstreamer1-debuginforedhat-upgrade-gstreamer1-develredhat-upgrade-gstreamer1-devel-docsredhat-upgrade-gstreamer1-plugins-bad-freeredhat-upgrade-gstreamer1-plugins-bad-free-debuginforedhat-upgrade-gstreamer1-plugins-bad-free-develredhat-upgrade-gstreamer1-plugins-bad-free-gtkredhat-upgrade-gstreamer1-plugins-baseredhat-upgrade-gstreamer1-plugins-base-debuginforedhat-upgrade-gstreamer1-plugins-base-develredhat-upgrade-gstreamer1-plugins-base-devel-docsredhat-upgrade-gstreamer1-plugins-base-toolsredhat-upgrade-gstreamer1-plugins-goodredhat-upgrade-gstreamer1-plugins-good-debuginforedhat-upgrade-orcredhat-upgrade-orc-compilerredhat-upgrade-orc-debuginforedhat-upgrade-orc-develredhat-upgrade-orc-doc | Aug 3, 2017 | Feb 9, 2017 |
| Suse | — | suse-upgrade-gstreamersuse-upgrade-gstreamer-develsuse-upgrade-gstreamer-langsuse-upgrade-gstreamer-plugins-badsuse-upgrade-gstreamer-plugins-bad-chromaprintsuse-upgrade-gstreamer-plugins-bad-develsuse-upgrade-gstreamer-plugins-bad-langsuse-upgrade-gstreamer-plugins-goodsuse-upgrade-gstreamer-plugins-good-langsuse-upgrade-gstreamer-plugins-uglysuse-upgrade-gstreamer-plugins-ugly-langsuse-upgrade-gstreamer-utilssuse-upgrade-libgstadaptivedemux-1_0-0suse-upgrade-libgstbadallocators-1_0-0suse-upgrade-libgstbadaudio-1_0-0suse-upgrade-libgstbadbase-1_0-0suse-upgrade-libgstbadvideo-1_0-0suse-upgrade-libgstbasecamerabinsrc-1_0-0suse-upgrade-libgstcodecparsers-1_0-0suse-upgrade-libgstgl-1_0-0suse-upgrade-libgstinsertbin-1_0-0suse-upgrade-libgstisoff-1_0-0suse-upgrade-libgstmpegts-1_0-0suse-upgrade-libgstphotography-1_0-0suse-upgrade-libgstplayer-1_0-0suse-upgrade-libgstreamer-1_0-0suse-upgrade-libgstreamer-1_0-0-32bitsuse-upgrade-libgstsctp-1_0-0suse-upgrade-libgsturidownloader-1_0-0suse-upgrade-libgstwayland-1_0-0suse-upgrade-libgstwebrtc-1_0-0suse-upgrade-typelib-1_0-gst-1_0suse-upgrade-typelib-1_0-gstbadallocators-1_0suse-upgrade-typelib-1_0-gstgl-1_0suse-upgrade-typelib-1_0-gstinsertbin-1_0suse-upgrade-typelib-1_0-gstmpegts-1_0suse-upgrade-typelib-1_0-gstplayer-1_0suse-upgrade-typelib-1_0-gstwebrtc-1_0 | Mar 1, 2017 | Feb 9, 2017 |
| Ubuntu | ubuntu-pro-upgrade-gstreamer1-0-toolsubuntu-pro-upgrade-libgstreamer1-0-0 | Aug 17, 2023 | Feb 9, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub