The gst_riff_create_audio_caps function in gst-libs/gst/riff/riff-media.c in gst-plugins-base in GStreamer before 1.10.3 does not properly limit recursion, which allows remote attackers to cause a denial of service (stack overflow and crash) via vectors involving nested WAVEFORMATEX.
CVSS Details
- CVSS 3.0 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | alpine-linux-upgrade-gst-plugins-base1 | Sep 20, 2017 | Feb 9, 2017 | |
| Arch Linux | arch-linux-upgrade-latest | Jul 11, 2025 | Feb 9, 2017 | |
| Centos_linux | — | centos-upgrade-clutter-gst2centos-upgrade-clutter-gst2-debuginfocentos-upgrade-clutter-gst2-develcentos-upgrade-gnome-video-effectscentos-upgrade-gstreamer-plugins-bad-freecentos-upgrade-gstreamer-plugins-bad-free-debuginfocentos-upgrade-gstreamer-plugins-bad-free-develcentos-upgrade-gstreamer-plugins-bad-free-devel-docscentos-upgrade-gstreamer-plugins-goodcentos-upgrade-gstreamer-plugins-good-debuginfocentos-upgrade-gstreamer-plugins-good-devel-docscentos-upgrade-gstreamer1centos-upgrade-gstreamer1-debuginfocentos-upgrade-gstreamer1-develcentos-upgrade-gstreamer1-devel-docscentos-upgrade-gstreamer1-plugins-bad-freecentos-upgrade-gstreamer1-plugins-bad-free-debuginfocentos-upgrade-gstreamer1-plugins-bad-free-develcentos-upgrade-gstreamer1-plugins-bad-free-gtkcentos-upgrade-gstreamer1-plugins-basecentos-upgrade-gstreamer1-plugins-base-debuginfocentos-upgrade-gstreamer1-plugins-base-develcentos-upgrade-gstreamer1-plugins-base-devel-docscentos-upgrade-gstreamer1-plugins-base-toolscentos-upgrade-gstreamer1-plugins-goodcentos-upgrade-gstreamer1-plugins-good-debuginfocentos-upgrade-orccentos-upgrade-orc-compilercentos-upgrade-orc-debuginfocentos-upgrade-orc-develcentos-upgrade-orc-doc | Aug 28, 2019 | Feb 9, 2017 |
| Debian | debian-upgrade-gst-plugins-base1-0 | Mar 28, 2017 | Feb 9, 2017 | |
| Gentoo Linux | gentoo-linux-upgrade-media-libs-gst-plugins-badgentoo-linux-upgrade-media-libs-gst-plugins-basegentoo-linux-upgrade-media-libs-gst-plugins-goodgentoo-linux-upgrade-media-libs-gst-plugins-ugly | Oct 30, 2017 | Feb 9, 2017 | |
| Huawei Euleros 2_0_sp1 | huawei-euleros-2_0_sp1-upgrade-gstreamer-plugins-bad-freehuawei-euleros-2_0_sp1-upgrade-gstreamer-plugins-bad-free-develhuawei-euleros-2_0_sp1-upgrade-gstreamer-plugins-bad-free-devel-docshuawei-euleros-2_0_sp1-upgrade-gstreamer-plugins-goodhuawei-euleros-2_0_sp1-upgrade-gstreamer1huawei-euleros-2_0_sp1-upgrade-gstreamer1-develhuawei-euleros-2_0_sp1-upgrade-gstreamer1-plugins-bad-freehuawei-euleros-2_0_sp1-upgrade-gstreamer1-plugins-basehuawei-euleros-2_0_sp1-upgrade-gstreamer1-plugins-base-develhuawei-euleros-2_0_sp1-upgrade-gstreamer1-plugins-base-toolshuawei-euleros-2_0_sp1-upgrade-gstreamer1-plugins-good | Nov 30, 2017 | Feb 9, 2017 | |
| Huawei Euleros 2_0_sp2 | huawei-euleros-2_0_sp2-upgrade-gstreamer1huawei-euleros-2_0_sp2-upgrade-gstreamer1-develhuawei-euleros-2_0_sp2-upgrade-gstreamer1-plugins-bad-freehuawei-euleros-2_0_sp2-upgrade-gstreamer1-plugins-basehuawei-euleros-2_0_sp2-upgrade-gstreamer1-plugins-base-develhuawei-euleros-2_0_sp2-upgrade-gstreamer1-plugins-good | Nov 30, 2017 | Feb 9, 2017 | |
| Oracle Solaris | oracle-solaris-11-3-upgrade-library-audio-gstreamer-0-10-32-0-175-3-0-0-26-0oracle-solaris-11-4-upgrade-entire-11-4-11-4-0-0-1-15-0 | Oct 19, 2018 | Feb 9, 2017 | |
| Oracle_linux | — | oracle-linux-upgrade-clutter-gst2oracle-linux-upgrade-clutter-gst2-develoracle-linux-upgrade-gnome-video-effectsoracle-linux-upgrade-gstreamer1oracle-linux-upgrade-gstreamer1-develoracle-linux-upgrade-gstreamer1-devel-docsoracle-linux-upgrade-gstreamer1-plugins-bad-freeoracle-linux-upgrade-gstreamer1-plugins-bad-free-develoracle-linux-upgrade-gstreamer1-plugins-bad-free-gtkoracle-linux-upgrade-gstreamer1-plugins-baseoracle-linux-upgrade-gstreamer1-plugins-base-develoracle-linux-upgrade-gstreamer1-plugins-base-devel-docsoracle-linux-upgrade-gstreamer1-plugins-base-toolsoracle-linux-upgrade-gstreamer1-plugins-goodoracle-linux-upgrade-gstreamer-plugins-bad-freeoracle-linux-upgrade-gstreamer-plugins-bad-free-develoracle-linux-upgrade-gstreamer-plugins-bad-free-devel-docsoracle-linux-upgrade-gstreamer-plugins-goodoracle-linux-upgrade-gstreamer-plugins-good-devel-docsoracle-linux-upgrade-orcoracle-linux-upgrade-orc-compileroracle-linux-upgrade-orc-develoracle-linux-upgrade-orc-doc | Aug 8, 2017 | Jan 15, 2016 |
| Redhat_linux | — | redhat-upgrade-clutter-gst2redhat-upgrade-clutter-gst2-debuginforedhat-upgrade-clutter-gst2-develredhat-upgrade-gnome-video-effectsredhat-upgrade-gstreamer-plugins-bad-freeredhat-upgrade-gstreamer-plugins-bad-free-debuginforedhat-upgrade-gstreamer-plugins-bad-free-develredhat-upgrade-gstreamer-plugins-bad-free-devel-docsredhat-upgrade-gstreamer-plugins-goodredhat-upgrade-gstreamer-plugins-good-debuginforedhat-upgrade-gstreamer-plugins-good-devel-docsredhat-upgrade-gstreamer1redhat-upgrade-gstreamer1-debuginforedhat-upgrade-gstreamer1-develredhat-upgrade-gstreamer1-devel-docsredhat-upgrade-gstreamer1-plugins-bad-freeredhat-upgrade-gstreamer1-plugins-bad-free-debuginforedhat-upgrade-gstreamer1-plugins-bad-free-develredhat-upgrade-gstreamer1-plugins-bad-free-gtkredhat-upgrade-gstreamer1-plugins-baseredhat-upgrade-gstreamer1-plugins-base-debuginforedhat-upgrade-gstreamer1-plugins-base-develredhat-upgrade-gstreamer1-plugins-base-devel-docsredhat-upgrade-gstreamer1-plugins-base-toolsredhat-upgrade-gstreamer1-plugins-goodredhat-upgrade-gstreamer1-plugins-good-debuginforedhat-upgrade-orcredhat-upgrade-orc-compilerredhat-upgrade-orc-debuginforedhat-upgrade-orc-develredhat-upgrade-orc-doc | Aug 3, 2017 | Feb 9, 2017 |
| Suse | — | suse-upgrade-gstreamersuse-upgrade-gstreamer-develsuse-upgrade-gstreamer-langsuse-upgrade-gstreamer-plugins-basesuse-upgrade-gstreamer-plugins-base-develsuse-upgrade-gstreamer-plugins-base-langsuse-upgrade-gstreamer-utilssuse-upgrade-libgstallocators-1_0-0suse-upgrade-libgstapp-1_0-0suse-upgrade-libgstapp-1_0-0-32bitsuse-upgrade-libgstaudio-1_0-0suse-upgrade-libgstaudio-1_0-0-32bitsuse-upgrade-libgstfft-1_0-0suse-upgrade-libgstfft-1_0-0-32bitsuse-upgrade-libgstpbutils-1_0-0suse-upgrade-libgstpbutils-1_0-0-32bitsuse-upgrade-libgstreamer-1_0-0suse-upgrade-libgstreamer-1_0-0-32bitsuse-upgrade-libgstriff-1_0-0suse-upgrade-libgstrtp-1_0-0suse-upgrade-libgstrtsp-1_0-0suse-upgrade-libgstsdp-1_0-0suse-upgrade-libgsttag-1_0-0suse-upgrade-libgsttag-1_0-0-32bitsuse-upgrade-libgstvideo-1_0-0suse-upgrade-libgstvideo-1_0-0-32bitsuse-upgrade-typelib-1_0-gst-1_0suse-upgrade-typelib-1_0-gstallocators-1_0suse-upgrade-typelib-1_0-gstapp-1_0suse-upgrade-typelib-1_0-gstaudio-1_0suse-upgrade-typelib-1_0-gstfft-1_0suse-upgrade-typelib-1_0-gstpbutils-1_0suse-upgrade-typelib-1_0-gstriff-1_0suse-upgrade-typelib-1_0-gstrtp-1_0suse-upgrade-typelib-1_0-gstrtsp-1_0suse-upgrade-typelib-1_0-gstsdp-1_0suse-upgrade-typelib-1_0-gsttag-1_0suse-upgrade-typelib-1_0-gstvideo-1_0 | Mar 1, 2017 | Feb 9, 2017 |
| Ubuntu | ubuntu-upgrade-gstreamer0-10-plugins-baseubuntu-upgrade-gstreamer1-0-plugins-base | Mar 28, 2017 | Feb 9, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub