Multiple use-after-free vulnerabilities in the (1) gst_mini_object_unref, (2) gst_tag_list_unref, and (3) gst_mxf_demux_update_essence_tracks functions in GStreamer before 1.10.3 allow remote attackers to cause a denial of service (crash) via vectors involving stream tags, as demonstrated by 02785736.mxf.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade gst-plugins-bad1 | Sep 20, 2017 | Feb 9, 2017 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Feb 9, 2017 |
| Centos_linux | — | Upgrade gstreamer1-plugins-goodUpgrade gstreamer-plugins-bad-free-develUpgrade gstreamer1Upgrade gstreamer1-plugins-baseUpgrade gstreamer-plugins-bad-freeUpgrade orc-compilerUpgrade gstreamer1-plugins-base-devel-docsUpgrade gstreamer1-plugins-base-develUpgrade gnome-video-effectsUpgrade orc-debuginfoUpgrade gstreamer1-plugins-bad-free-gtkUpgrade gstreamer1-debuginfoUpgrade gstreamer-plugins-goodUpgrade gstreamer-plugins-good-devel-docsUpgrade clutter-gst2-debuginfoUpgrade gstreamer1-plugins-bad-free-develUpgrade gstreamer1-plugins-bad-freeUpgrade gstreamer-plugins-bad-free-devel-docsUpgrade orcUpgrade orc-develUpgrade gstreamer1-plugins-base-debuginfoUpgrade gstreamer1-plugins-base-toolsUpgrade clutter-gst2-develUpgrade gstreamer1-devel-docsUpgrade orc-docUpgrade gstreamer1-plugins-good-debuginfoUpgrade gstreamer1-develUpgrade gstreamer-plugins-good-debuginfoUpgrade clutter-gst2Upgrade gstreamer-plugins-bad-free-debuginfoUpgrade gstreamer1-plugins-bad-free-debuginfo | Aug 28, 2019 | Feb 9, 2017 |
| Debian | — | Upgrade gst-plugins-bad0.10Upgrade gst-plugins-bad1.0 | Mar 28, 2017 | Feb 9, 2017 |
| Gentoo Linux | — | Upgrade media-libs/gst-plugins-bad.Upgrade media-libs/gst-plugins-ugly.Upgrade media-libs/gst-plugins-base.Upgrade media-libs/gst-plugins-good. | Oct 30, 2017 | Feb 9, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade gstreamer1-plugins-goodUpgrade gstreamer-plugins-goodUpgrade gstreamer-plugins-bad-free-develUpgrade gstreamer1-plugins-base-toolsUpgrade gstreamer1-plugins-bad-freeUpgrade gstreamer1-plugins-base-develUpgrade gstreamer1-develUpgrade gstreamer-plugins-bad-freeUpgrade gstreamer-plugins-bad-free-devel-docsUpgrade gstreamer1Upgrade gstreamer1-plugins-base | Nov 30, 2017 | Feb 9, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade gstreamer1-plugins-bad-freeUpgrade gstreamer1Upgrade gstreamer1-plugins-baseUpgrade gstreamer1-plugins-goodUpgrade gstreamer1-develUpgrade gstreamer1-plugins-base-devel | Nov 30, 2017 | Feb 9, 2017 |
| Oracle_linux | — | Upgrade gstreamer-plugins-goodUpgrade gstreamer1-plugins-base-develUpgrade orc-compilerUpgrade gstreamer-plugins-bad-free-develUpgrade gstreamer1Upgrade gstreamer1-plugins-base-devel-docsUpgrade gstreamer1-plugins-bad-free-gtkUpgrade gstreamer-plugins-bad-freeUpgrade orc-docUpgrade gstreamer1-plugins-goodUpgrade gnome-video-effectsUpgrade gstreamer-plugins-bad-free-devel-docsUpgrade gstreamer1-plugins-baseUpgrade gstreamer-plugins-good-devel-docsUpgrade gstreamer1-plugins-bad-free-develUpgrade gstreamer1-plugins-bad-freeUpgrade clutter-gst2Upgrade gstreamer1-devel-docsUpgrade gstreamer1-develUpgrade gstreamer1-plugins-base-toolsUpgrade orc-develUpgrade clutter-gst2-develUpgrade orc | Aug 8, 2017 | Jan 19, 2017 |
| Redhat_linux | — | Upgrade gstreamer1Upgrade gstreamer-plugins-bad-free-devel-docsUpgrade gstreamer-plugins-goodUpgrade gstreamer1-plugins-base-toolsUpgrade gnome-video-effectsUpgrade orc-compilerUpgrade clutter-gst2Upgrade gstreamer1-debuginfoUpgrade gstreamer-plugins-good-devel-docsUpgrade gstreamer1-plugins-base-develUpgrade orc-develUpgrade gstreamer1-plugins-baseNo solution existsUpgrade gstreamer1-plugins-bad-freeUpgrade orc-debuginfoUpgrade gstreamer1-devel-docsUpgrade gstreamer1-plugins-base-debuginfoUpgrade gstreamer1-plugins-bad-free-develUpgrade clutter-gst2-develUpgrade gstreamer1-plugins-bad-free-debuginfoUpgrade orcUpgrade gstreamer1-develUpgrade gstreamer-plugins-good-debuginfoUpgrade gstreamer-plugins-bad-free-debuginfoUpgrade gstreamer1-plugins-good-debuginfoUpgrade clutter-gst2-debuginfoUpgrade gstreamer-plugins-bad-free-develUpgrade gstreamer1-plugins-bad-free-gtkUpgrade gstreamer1-plugins-base-devel-docsUpgrade gstreamer1-plugins-goodUpgrade orc-docUpgrade gstreamer-plugins-bad-free | Aug 3, 2017 | Feb 9, 2017 |
| Suse | — | Upgrade libgstreamer-1_0-0-32bitUpgrade libgstbasecamerabinsrc-1_0-0Upgrade libgsturidownloader-1_0-0Upgrade gstreamer-plugins-bad-develUpgrade gstreamer-utilsUpgrade libgstadaptivedemux-1_0-0Upgrade libgstgl-1_0-0Upgrade gstreamer-plugins-badUpgrade libgstmpegts-1_0-0Upgrade gstreamer-plugins-bad-langUpgrade libgstphotography-1_0-0Upgrade gstreamer-develUpgrade libgstinsertbin-1_0-0Upgrade libgstcodecparsers-1_0-0Upgrade libgstbadaudio-1_0-0Upgrade libgstbadvideo-1_0-0Upgrade gstreamerUpgrade typelib-1_0-gst-1_0Upgrade libgstreamer-1_0-0Upgrade libgstbadbase-1_0-0Upgrade gstreamer-lang | Apr 10, 2017 | Feb 9, 2017 |
| Ubuntu | — | Upgrade gst-plugins-bad0.10 (Ubuntu Pro) | Nov 19, 2024 | Feb 9, 2017 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub