GStreamer before 1.16.0 has a heap-based buffer overflow in the RTSP connection parser via a crafted response from a server, potentially allowing remote code execution.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade gst-plugins-base | Mar 26, 2024 | Apr 24, 2019 |
| Debian | — | Upgrade gst-plugins-base1.0 | Apr 29, 2019 | Apr 24, 2019 |
| Gentoo Linux | — | Upgrade media-libs/gst-plugins-base. | Mar 16, 2020 | Apr 24, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade gstreamer1-plugins-base-develUpgrade gstreamer1-plugins-base | May 30, 2019 | Apr 24, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade gstreamer-plugins-base | May 30, 2019 | Apr 24, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade gstreamer1-plugins-baseUpgrade gstreamer1-plugins-base-devel | May 30, 2019 | Apr 24, 2019 |
| Oracle Solaris | — | Upgrade library/desktop/gstreamer-1 to version 1.16.2-11.4.21.0.1.69.0 on Solaris 11.4Upgrade library/desktop/gstreamer-1/gst-plugins-base to version 1.16.2-11.4.21.0.1.69.0 on Solaris 11.4Upgrade library/python/gst-python-1 to version 1.16.2-11.4.21.0.1.69.0 on Solaris 11.4Upgrade library/python/gst-python-1-37 to version 1.16.2-11.4.21.0.1.69.0 on Solaris 11.4Upgrade library/desktop/gstreamer-1/gst-plugins-good to version 1.16.2-11.4.21.0.1.69.0 on Solaris 11.4 | Jan 19, 2021 | Apr 24, 2019 |
| Redhat_linux | — | — | Jul 9, 2025 | Apr 24, 2019 |
| Suse | — | Upgrade libgstaudio-1_0-0Upgrade typelib-1_0-gstvideo-1_0Upgrade libgsttag-1_0-0-32bitUpgrade typelib-1_0-gstgl-1_0Upgrade gstreamer-plugins-baseUpgrade libgsttag-1_0-0Upgrade gstreamer-plugins-base-langUpgrade libgstgl-1_0-0Upgrade libgstvideo-1_0-0Upgrade libgstinterfaces-0_10-0-32bitUpgrade typelib-1_0-gstrtsp-1_0Upgrade gstreamer-0_10-plugins-base-langUpgrade libgstaudio-1_0-0-32bitUpgrade typelib-1_0-GstInterfaces-0_10Upgrade gstreamer-0_10-plugins-base-docUpgrade gstreamer-0_10-plugins-baseUpgrade libgstvideo-1_0-0-32bitUpgrade libgstsdp-1_0-0Upgrade libgstpbutils-1_0-0-32bitUpgrade typelib-1_0-gstsdp-1_0Upgrade libgstfft-1_0-0-32bitUpgrade libgstapp-1_0-0Upgrade gstreamer-plugins-base-docUpgrade gstreamer-0_10-plugins-base-32bitUpgrade gstreamer-plugins-base-devel-32bitUpgrade libgstallocators-1_0-0Upgrade libgstrtp-1_0-0Upgrade libgstapp-0_10-0-32bitUpgrade libgstapp-0_10-0Upgrade gstreamer-plugins-base-develUpgrade libgstriff-1_0-0-32bitUpgrade libgstrtp-1_0-0-32bitUpgrade libgstriff-1_0-0Upgrade typelib-1_0-gstrtp-1_0Upgrade typelib-1_0-gsttag-1_0Upgrade typelib-1_0-GstFft-1_0Upgrade typelib-1_0-GstApp-0_10Upgrade typelib-1_0-gstapp-1_0Upgrade libgstrtsp-1_0-0-32bitUpgrade libgstapp-1_0-0-32bitUpgrade libgstinterfaces-0_10-0Upgrade libgstfft-1_0-0Upgrade typelib-1_0-gstpbutils-1_0Upgrade libgstrtsp-1_0-0Upgrade libgstsdp-1_0-0-32bitUpgrade typelib-1_0-gstaudio-1_0Upgrade libgstallocators-1_0-0-32bitUpgrade gstreamer-plugins-base-32bitUpgrade typelib-1_0-gstallocators-1_0Upgrade gstreamer-0_10-plugins-base-develUpgrade libgstpbutils-1_0-0 | Jun 11, 2019 | Apr 24, 2019 |
| Ubuntu | — | Upgrade gstreamer1.0-plugins-baseUpgrade gstreamer0.10-plugins-base | May 4, 2019 | Apr 24, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub