Multiple use-after-free vulnerabilities in the (1) gst_mini_object_unref, (2) gst_tag_list_unref, and (3) gst_mxf_demux_update_essence_tracks functions in GStreamer before 1.10.3 allow remote attackers to cause a denial of service (crash) via vectors involving stream tags, as demonstrated by 02785736.mxf.
CVSS Details
- CVSS 3.0 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade gst-plugins-bad1 | Sep 20, 2017 | Feb 9, 2017 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Feb 9, 2017 |
| Centos_linux | — | Upgrade clutter-gst2-develUpgrade gstreamer1-plugins-base-toolsUpgrade gstreamer1-plugins-bad-free-develUpgrade gstreamer1-plugins-bad-freeUpgrade orcUpgrade gstreamer-plugins-bad-free-devel-docsUpgrade orc-develUpgrade clutter-gst2-debuginfoUpgrade gstreamer-plugins-good-debuginfoUpgrade gstreamer1-devel-docsUpgrade clutter-gst2Upgrade gstreamer1-plugins-base-debuginfoUpgrade gstreamer-plugins-bad-free-debuginfoUpgrade gstreamer1-develUpgrade orc-docUpgrade gstreamer1-plugins-bad-free-debuginfoUpgrade gstreamer1-plugins-good-debuginfoUpgrade gstreamer1-plugins-base-develUpgrade orc-compilerUpgrade gstreamer1-plugins-base-devel-docsUpgrade gstreamer-plugins-good-devel-docsUpgrade gstreamer1-debuginfoUpgrade gstreamer1-plugins-goodUpgrade gstreamer1Upgrade orc-debuginfoUpgrade gstreamer-plugins-bad-freeUpgrade gstreamer-plugins-bad-free-develUpgrade gnome-video-effectsUpgrade gstreamer1-plugins-bad-free-gtkUpgrade gstreamer1-plugins-baseUpgrade gstreamer-plugins-good | Aug 28, 2019 | Feb 9, 2017 |
| Debian | — | Upgrade gst-plugins-bad0.10Upgrade gst-plugins-bad1.0 | Mar 28, 2017 | Feb 9, 2017 |
| Gentoo Linux | — | Upgrade media-libs/gst-plugins-bad.Upgrade media-libs/gst-plugins-good.Upgrade media-libs/gst-plugins-ugly.Upgrade media-libs/gst-plugins-base. | Oct 30, 2017 | Feb 9, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade gstreamer1-plugins-goodUpgrade gstreamer1-plugins-bad-freeUpgrade gstreamer-plugins-bad-free-develUpgrade gstreamer-plugins-goodUpgrade gstreamer-plugins-bad-free-devel-docsUpgrade gstreamer-plugins-bad-freeUpgrade gstreamer1-plugins-base-develUpgrade gstreamer1Upgrade gstreamer1-plugins-base-toolsUpgrade gstreamer1-develUpgrade gstreamer1-plugins-base | Nov 30, 2017 | Feb 9, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade gstreamer1-plugins-goodUpgrade gstreamer1-plugins-baseUpgrade gstreamer1Upgrade gstreamer1-plugins-bad-freeUpgrade gstreamer1-plugins-base-develUpgrade gstreamer1-devel | Nov 30, 2017 | Feb 9, 2017 |
| Oracle_linux | — | Upgrade gstreamer1-devel-docsUpgrade orcUpgrade gstreamer1-plugins-base-toolsUpgrade gstreamer1-plugins-bad-freeUpgrade clutter-gst2-develUpgrade clutter-gst2Upgrade gstreamer-plugins-goodUpgrade gstreamer1-plugins-bad-free-develUpgrade gstreamer1-develUpgrade orc-develUpgrade gstreamer1-plugins-baseUpgrade gstreamer-plugins-bad-free-develUpgrade gstreamer-plugins-bad-free-devel-docsUpgrade orc-compilerUpgrade orc-docUpgrade gstreamer-plugins-good-devel-docsUpgrade gstreamer-plugins-bad-freeUpgrade gstreamer1-plugins-base-devel-docsUpgrade gnome-video-effectsUpgrade gstreamer1Upgrade gstreamer1-plugins-goodUpgrade gstreamer1-plugins-bad-free-gtkUpgrade gstreamer1-plugins-base-devel | Aug 8, 2017 | Jan 19, 2017 |
| Redhat_linux | — | Upgrade gstreamer1-debuginfoUpgrade gstreamer1-plugins-bad-freeUpgrade orc-debuginfoUpgrade gstreamer-plugins-bad-free-devel-docsUpgrade orc-compilerUpgrade gstreamer1-plugins-base-toolsUpgrade orc-develNo solution existsUpgrade gstreamer-plugins-good-devel-docsUpgrade gnome-video-effectsUpgrade gstreamer1Upgrade gstreamer-plugins-goodUpgrade gstreamer1-plugins-base-develUpgrade clutter-gst2Upgrade gstreamer1-plugins-baseUpgrade gstreamer1-plugins-goodUpgrade gstreamer1-plugins-bad-free-develUpgrade gstreamer1-plugins-base-devel-docsUpgrade clutter-gst2-debuginfoUpgrade gstreamer1-plugins-bad-free-debuginfoUpgrade gstreamer-plugins-good-debuginfoUpgrade gstreamer-plugins-bad-free-debuginfoUpgrade gstreamer1-plugins-base-debuginfoUpgrade orc-docUpgrade gstreamer-plugins-bad-freeUpgrade gstreamer-plugins-bad-free-develUpgrade gstreamer1-plugins-bad-free-gtkUpgrade gstreamer1-devel-docsUpgrade clutter-gst2-develUpgrade gstreamer1-develUpgrade gstreamer1-plugins-good-debuginfoUpgrade orc | Aug 3, 2017 | Feb 9, 2017 |
| Suse | — | Upgrade libgstcodecparsers-1_0-0Upgrade gstreamerUpgrade libgstbadaudio-1_0-0Upgrade gstreamer-langUpgrade libgstbadvideo-1_0-0Upgrade libgstbadbase-1_0-0Upgrade gstreamer-develUpgrade gstreamer-plugins-bad-langUpgrade libgstphotography-1_0-0Upgrade libgstinsertbin-1_0-0Upgrade libgstreamer-1_0-0Upgrade typelib-1_0-gst-1_0Upgrade libgstreamer-1_0-0-32bitUpgrade libgstbasecamerabinsrc-1_0-0Upgrade libgstadaptivedemux-1_0-0Upgrade gstreamer-utilsUpgrade libgstgl-1_0-0Upgrade libgsturidownloader-1_0-0Upgrade gstreamer-plugins-bad-develUpgrade gstreamer-plugins-badUpgrade libgstmpegts-1_0-0 | Apr 10, 2017 | Feb 9, 2017 |
| Ubuntu | — | Upgrade gst-plugins-bad0.10 (Ubuntu Pro) | Nov 19, 2024 | Feb 9, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub