GStreamer before 1.16.0 has a heap-based buffer overflow in the RTSP connection parser via a crafted response from a server, potentially allowing remote code execution.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade gst-plugins-base | Mar 26, 2024 | Apr 24, 2019 |
| Debian | — | Upgrade gst-plugins-base1.0 | Apr 29, 2019 | Apr 24, 2019 |
| Gentoo Linux | — | Upgrade media-libs/gst-plugins-base. | Mar 16, 2020 | Apr 24, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade gstreamer1-plugins-baseUpgrade gstreamer1-plugins-base-devel | May 30, 2019 | Apr 24, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade gstreamer-plugins-base | May 30, 2019 | Apr 24, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade gstreamer1-plugins-baseUpgrade gstreamer1-plugins-base-devel | May 30, 2019 | Apr 24, 2019 |
| Oracle Solaris | — | Upgrade library/desktop/gstreamer-1 to version 1.16.2-11.4.21.0.1.69.0 on Solaris 11.4Upgrade library/desktop/gstreamer-1/gst-plugins-base to version 1.16.2-11.4.21.0.1.69.0 on Solaris 11.4Upgrade library/desktop/gstreamer-1/gst-plugins-good to version 1.16.2-11.4.21.0.1.69.0 on Solaris 11.4Upgrade library/python/gst-python-1 to version 1.16.2-11.4.21.0.1.69.0 on Solaris 11.4Upgrade library/python/gst-python-1-37 to version 1.16.2-11.4.21.0.1.69.0 on Solaris 11.4 | Jan 19, 2021 | Apr 24, 2019 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 24, 2019 |
| Suse | — | Upgrade gstreamer-0_10-plugins-base-docUpgrade gstreamer-0_10-plugins-baseUpgrade libgstaudio-1_0-0-32bitUpgrade gstreamer-plugins-base-devel-32bitUpgrade libgstgl-1_0-0Upgrade libgstaudio-1_0-0Upgrade libgsttag-1_0-0-32bitUpgrade typelib-1_0-gstsdp-1_0Upgrade libgstpbutils-1_0-0-32bitUpgrade libgstvideo-1_0-0Upgrade libgstapp-1_0-0Upgrade libgstvideo-1_0-0-32bitUpgrade libgstinterfaces-0_10-0-32bitUpgrade typelib-1_0-gstrtsp-1_0Upgrade gstreamer-plugins-baseUpgrade gstreamer-plugins-base-docUpgrade libgstsdp-1_0-0Upgrade typelib-1_0-gstgl-1_0Upgrade gstreamer-plugins-base-langUpgrade libgstallocators-1_0-0Upgrade libgsttag-1_0-0Upgrade gstreamer-0_10-plugins-base-32bitUpgrade typelib-1_0-GstInterfaces-0_10Upgrade libgstfft-1_0-0-32bitUpgrade gstreamer-0_10-plugins-base-langUpgrade typelib-1_0-gstvideo-1_0Upgrade gstreamer-plugins-base-develUpgrade libgstinterfaces-0_10-0Upgrade typelib-1_0-gstallocators-1_0Upgrade typelib-1_0-GstFft-1_0Upgrade libgstpbutils-1_0-0Upgrade libgstallocators-1_0-0-32bitUpgrade typelib-1_0-gstapp-1_0Upgrade typelib-1_0-GstApp-0_10Upgrade gstreamer-0_10-plugins-base-develUpgrade gstreamer-plugins-base-32bitUpgrade typelib-1_0-gstaudio-1_0Upgrade libgstriff-1_0-0-32bitUpgrade libgstsdp-1_0-0-32bitUpgrade libgstrtp-1_0-0-32bitUpgrade typelib-1_0-gstrtp-1_0Upgrade libgstapp-0_10-0-32bitUpgrade libgstriff-1_0-0Upgrade libgstrtsp-1_0-0-32bitUpgrade libgstrtsp-1_0-0Upgrade libgstrtp-1_0-0Upgrade libgstapp-0_10-0Upgrade typelib-1_0-gsttag-1_0Upgrade libgstapp-1_0-0-32bitUpgrade typelib-1_0-gstpbutils-1_0Upgrade libgstfft-1_0-0 | Jun 11, 2019 | Apr 24, 2019 |
| Ubuntu | — | Upgrade gstreamer1.0-plugins-baseUpgrade gstreamer0.10-plugins-base | May 4, 2019 | Apr 24, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub