The gst_date_time_new_from_iso8601_string function in gst/gstdatetime.c in GStreamer before 1.10.3 allows remote attackers to cause a denial of service (out-of-bounds heap read) via a malformed datetime string.
CVSS Details
- CVSS 3.0 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Feb 9, 2017 |
| Centos_linux | — | Upgrade gstreamer1-plugins-bad-free-develUpgrade gstreamer1-plugins-base-devel-docsUpgrade gstreamer1-debuginfoUpgrade orc-compilerUpgrade orcUpgrade gnome-video-effectsUpgrade gstreamer1-plugins-bad-free-debuginfoUpgrade gstreamer-plugins-bad-freeUpgrade gstreamer-plugins-bad-free-debuginfoUpgrade orc-develUpgrade gstreamer1-plugins-good-debuginfoUpgrade clutter-gst2-develUpgrade gstreamer1-plugins-base-toolsUpgrade gstreamer-plugins-bad-free-devel-docsUpgrade gstreamer-plugins-good-devel-docsUpgrade orc-debuginfoUpgrade clutter-gst2Upgrade gstreamer-plugins-bad-free-develUpgrade gstreamer1-plugins-goodUpgrade gstreamer1-plugins-bad-freeUpgrade gstreamer-plugins-goodUpgrade gstreamer1-devel-docsUpgrade gstreamer1-plugins-base-debuginfoUpgrade gstreamer1Upgrade gstreamer-plugins-good-debuginfoUpgrade gstreamer1-plugins-base-develUpgrade gstreamer1-plugins-baseUpgrade orc-docUpgrade gstreamer1-plugins-bad-free-gtkUpgrade clutter-gst2-debuginfoUpgrade gstreamer1-devel | Aug 28, 2019 | Feb 9, 2017 |
| Debian | — | Upgrade gstreamer1.0 | Mar 28, 2017 | Feb 9, 2017 |
| Gentoo Linux | — | Upgrade media-libs/gst-plugins-base.Upgrade media-libs/gst-plugins-good.Upgrade media-libs/gst-plugins-bad.Upgrade media-libs/gst-plugins-ugly. | Oct 30, 2017 | Feb 9, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade gstreamer1-develUpgrade gstreamer1-plugins-base-toolsUpgrade gstreamer-plugins-bad-freeUpgrade gstreamer-plugins-goodUpgrade gstreamer1-plugins-base-develUpgrade gstreamer1-plugins-goodUpgrade gstreamer1Upgrade gstreamer-plugins-bad-free-develUpgrade gstreamer-plugins-bad-free-devel-docsUpgrade gstreamer1-plugins-baseUpgrade gstreamer1-plugins-bad-free | Nov 30, 2017 | Feb 9, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade gstreamer1-plugins-goodUpgrade gstreamer1-plugins-bad-freeUpgrade gstreamer1-plugins-base-develUpgrade gstreamer1Upgrade gstreamer1-plugins-baseUpgrade gstreamer1-devel | Nov 30, 2017 | Feb 9, 2017 |
| Oracle Solaris | — | Upgrade entire/ to version 11.4-11.4.0.0.1.15.0 on Solaris 11.4Upgrade library/audio/gstreamer to version 0.10.32-0.175.3.0.0.26.0 on Solaris 11.3 | Oct 19, 2018 | Feb 9, 2017 |
| Oracle_linux | — | Upgrade gstreamer1-plugins-base-toolsUpgrade orc-docUpgrade gstreamer1-devel-docsUpgrade gstreamer1-plugins-goodUpgrade gstreamer1Upgrade gstreamer1-plugins-base-develUpgrade gstreamer1-plugins-bad-free-gtkUpgrade orcUpgrade gstreamer-plugins-bad-freeUpgrade gstreamer1-plugins-bad-free-develUpgrade gstreamer-plugins-bad-free-develUpgrade gstreamer-plugins-good-devel-docsUpgrade gstreamer1-develUpgrade clutter-gst2-develUpgrade gnome-video-effectsUpgrade gstreamer-plugins-goodUpgrade orc-develUpgrade orc-compilerUpgrade gstreamer-plugins-bad-free-devel-docsUpgrade gstreamer1-plugins-baseUpgrade clutter-gst2Upgrade gstreamer1-plugins-base-devel-docsUpgrade gstreamer1-plugins-bad-free | Aug 8, 2017 | Jan 15, 2016 |
| Redhat_linux | — | Upgrade gstreamer1-plugins-base-toolsUpgrade gstreamer-plugins-good-devel-docsUpgrade gstreamer1-plugins-base-develUpgrade gstreamer-plugins-bad-freeUpgrade gstreamer1-plugins-bad-free-develUpgrade gstreamer1-plugins-goodUpgrade gstreamer1-devel-docsUpgrade orcUpgrade clutter-gst2-debuginfoUpgrade gstreamer1-plugins-bad-free-gtkUpgrade clutter-gst2-develUpgrade orc-docUpgrade gstreamer1-develUpgrade gstreamer-plugins-bad-free-develUpgrade gstreamer-plugins-bad-free-debuginfoUpgrade gstreamer1-plugins-bad-free-debuginfoUpgrade gstreamer1-plugins-base-debuginfoUpgrade gstreamer1-plugins-base-devel-docsUpgrade gstreamer1-plugins-baseUpgrade gstreamer1-debuginfoUpgrade gstreamer1Upgrade gstreamer-plugins-goodUpgrade orc-compilerUpgrade orc-debuginfoUpgrade gstreamer-plugins-bad-free-devel-docsUpgrade orc-develUpgrade clutter-gst2Upgrade gstreamer1-plugins-bad-freeUpgrade gstreamer-plugins-good-debuginfoUpgrade gstreamer1-plugins-good-debuginfoUpgrade gnome-video-effects | Aug 3, 2017 | Feb 9, 2017 |
| Suse | — | Upgrade typelib-1_0-gstbadallocators-1_0Upgrade libgstisoff-1_0-0Upgrade gstreamer-langUpgrade libgstadaptivedemux-1_0-0Upgrade libgstgl-1_0-0Upgrade libgstwebrtc-1_0-0Upgrade typelib-1_0-gstgl-1_0Upgrade typelib-1_0-gstwebrtc-1_0Upgrade gstreamer-plugins-ugly-langUpgrade typelib-1_0-gstinsertbin-1_0Upgrade gstreamer-plugins-badUpgrade typelib-1_0-gstplayer-1_0Upgrade libgstbasecamerabinsrc-1_0-0Upgrade gstreamer-utilsUpgrade libgstmpegts-1_0-0Upgrade gstreamer-plugins-bad-develUpgrade libgstreamer-1_0-0-32bitUpgrade libgsturidownloader-1_0-0Upgrade libgstbadvideo-1_0-0Upgrade libgstsctp-1_0-0Upgrade gstreamer-plugins-goodUpgrade libgstphotography-1_0-0Upgrade gstreamer-develUpgrade typelib-1_0-gst-1_0Upgrade libgstinsertbin-1_0-0Upgrade libgstbadallocators-1_0-0Upgrade gstreamer-plugins-uglyUpgrade gstreamer-plugins-bad-chromaprintUpgrade libgstplayer-1_0-0Upgrade libgstreamer-1_0-0Upgrade libgstbadaudio-1_0-0Upgrade libgstbadbase-1_0-0Upgrade typelib-1_0-gstmpegts-1_0Upgrade gstreamer-plugins-bad-langUpgrade gstreamer-plugins-good-langUpgrade libgstcodecparsers-1_0-0Upgrade gstreamerUpgrade libgstwayland-1_0-0 | Mar 1, 2017 | Feb 9, 2017 |
| Ubuntu | — | Upgrade libgstreamer1.0-0 (Ubuntu Pro)Upgrade gstreamer1.0-tools (Ubuntu Pro) | Aug 17, 2023 | Feb 9, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub