GStreamer before 1.16.0 has a heap-based buffer overflow in the RTSP connection parser via a crafted response from a server, potentially allowing remote code execution.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade gst-plugins-base | Mar 26, 2024 | Apr 24, 2019 |
| Debian | — | Upgrade gst-plugins-base1.0 | Apr 29, 2019 | Apr 24, 2019 |
| Gentoo Linux | — | Upgrade media-libs/gst-plugins-base. | Mar 16, 2020 | Apr 24, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade gstreamer1-plugins-base-develUpgrade gstreamer1-plugins-base | May 30, 2019 | Apr 24, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade gstreamer-plugins-base | May 30, 2019 | Apr 24, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade gstreamer1-plugins-baseUpgrade gstreamer1-plugins-base-devel | May 30, 2019 | Apr 24, 2019 |
| Oracle Solaris | — | Upgrade library/desktop/gstreamer-1/gst-plugins-good to version 1.16.2-11.4.21.0.1.69.0 on Solaris 11.4Upgrade library/python/gst-python-1-37 to version 1.16.2-11.4.21.0.1.69.0 on Solaris 11.4Upgrade library/python/gst-python-1 to version 1.16.2-11.4.21.0.1.69.0 on Solaris 11.4Upgrade library/desktop/gstreamer-1/gst-plugins-base to version 1.16.2-11.4.21.0.1.69.0 on Solaris 11.4Upgrade library/desktop/gstreamer-1 to version 1.16.2-11.4.21.0.1.69.0 on Solaris 11.4 | Jan 19, 2021 | Apr 24, 2019 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 24, 2019 |
| Suse | — | Upgrade libgstapp-0_10-0Upgrade libgstsdp-1_0-0-32bitUpgrade gstreamer-plugins-base-32bitUpgrade gstreamer-0_10-plugins-base-develUpgrade libgstrtp-1_0-0Upgrade typelib-1_0-GstApp-0_10Upgrade libgstrtsp-1_0-0Upgrade libgstriff-1_0-0Upgrade libgstrtsp-1_0-0-32bitUpgrade typelib-1_0-gstapp-1_0Upgrade typelib-1_0-gstallocators-1_0Upgrade libgstrtp-1_0-0-32bitUpgrade typelib-1_0-gstrtp-1_0Upgrade libgstpbutils-1_0-0Upgrade typelib-1_0-gsttag-1_0Upgrade libgstapp-0_10-0-32bitUpgrade libgstinterfaces-0_10-0Upgrade libgstallocators-1_0-0-32bitUpgrade typelib-1_0-GstFft-1_0Upgrade typelib-1_0-gstaudio-1_0Upgrade gstreamer-plugins-base-develUpgrade libgstfft-1_0-0Upgrade libgstriff-1_0-0-32bitUpgrade typelib-1_0-gstpbutils-1_0Upgrade libgstapp-1_0-0-32bitUpgrade libgstsdp-1_0-0Upgrade gstreamer-plugins-baseUpgrade gstreamer-0_10-plugins-baseUpgrade libgstaudio-1_0-0Upgrade gstreamer-plugins-base-docUpgrade gstreamer-0_10-plugins-base-32bitUpgrade typelib-1_0-GstInterfaces-0_10Upgrade libgstallocators-1_0-0Upgrade libgsttag-1_0-0Upgrade gstreamer-0_10-plugins-base-langUpgrade typelib-1_0-gstsdp-1_0Upgrade libgsttag-1_0-0-32bitUpgrade typelib-1_0-gstgl-1_0Upgrade libgstapp-1_0-0Upgrade gstreamer-plugins-base-langUpgrade libgstvideo-1_0-0Upgrade typelib-1_0-gstvideo-1_0Upgrade libgstfft-1_0-0-32bitUpgrade gstreamer-0_10-plugins-base-docUpgrade libgstvideo-1_0-0-32bitUpgrade gstreamer-plugins-base-devel-32bitUpgrade libgstaudio-1_0-0-32bitUpgrade libgstgl-1_0-0Upgrade typelib-1_0-gstrtsp-1_0Upgrade libgstinterfaces-0_10-0-32bitUpgrade libgstpbutils-1_0-0-32bit | Jun 11, 2019 | Apr 24, 2019 |
| Ubuntu | — | Upgrade gstreamer0.10-plugins-baseUpgrade gstreamer1.0-plugins-base | May 4, 2019 | Apr 24, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub