GStreamer before 1.16.0 has a heap-based buffer overflow in the RTSP connection parser via a crafted response from a server, potentially allowing remote code execution.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade gst-plugins-base | Mar 26, 2024 | Apr 24, 2019 |
| Debian | — | Upgrade gst-plugins-base1.0 | Apr 29, 2019 | Apr 24, 2019 |
| Gentoo Linux | — | Upgrade media-libs/gst-plugins-base. | Mar 16, 2020 | Apr 24, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade gstreamer1-plugins-base-develUpgrade gstreamer1-plugins-base | May 30, 2019 | Apr 24, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade gstreamer-plugins-base | May 30, 2019 | Apr 24, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade gstreamer1-plugins-base-develUpgrade gstreamer1-plugins-base | May 30, 2019 | Apr 24, 2019 |
| Oracle Solaris | — | Upgrade library/desktop/gstreamer-1 to version 1.16.2-11.4.21.0.1.69.0 on Solaris 11.4Upgrade library/desktop/gstreamer-1/gst-plugins-base to version 1.16.2-11.4.21.0.1.69.0 on Solaris 11.4Upgrade library/desktop/gstreamer-1/gst-plugins-good to version 1.16.2-11.4.21.0.1.69.0 on Solaris 11.4Upgrade library/python/gst-python-1 to version 1.16.2-11.4.21.0.1.69.0 on Solaris 11.4Upgrade library/python/gst-python-1-37 to version 1.16.2-11.4.21.0.1.69.0 on Solaris 11.4 | Jan 19, 2021 | Apr 24, 2019 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 24, 2019 |
| Suse | — | Upgrade libgstapp-1_0-0-32bitUpgrade libgstfft-1_0-0Upgrade typelib-1_0-gstpbutils-1_0Upgrade libgstriff-1_0-0Upgrade gstreamer-plugins-base-32bitUpgrade typelib-1_0-gstaudio-1_0Upgrade libgstapp-0_10-0-32bitUpgrade libgstrtsp-1_0-0-32bitUpgrade gstreamer-plugins-base-develUpgrade typelib-1_0-gsttag-1_0Upgrade libgstrtsp-1_0-0Upgrade typelib-1_0-gstallocators-1_0Upgrade libgstallocators-1_0-0-32bitUpgrade libgstrtp-1_0-0Upgrade libgstpbutils-1_0-0Upgrade libgstriff-1_0-0-32bitUpgrade typelib-1_0-GstFft-1_0Upgrade typelib-1_0-gstrtp-1_0Upgrade typelib-1_0-GstApp-0_10Upgrade libgstinterfaces-0_10-0Upgrade gstreamer-0_10-plugins-base-develUpgrade libgstsdp-1_0-0-32bitUpgrade libgstrtp-1_0-0-32bitUpgrade libgstapp-0_10-0Upgrade typelib-1_0-gstapp-1_0Upgrade libgstgl-1_0-0Upgrade gstreamer-plugins-base-devel-32bitUpgrade libgstsdp-1_0-0Upgrade typelib-1_0-gstgl-1_0Upgrade libgstvideo-1_0-0Upgrade gstreamer-0_10-plugins-base-docUpgrade libgstvideo-1_0-0-32bitUpgrade libgstaudio-1_0-0-32bitUpgrade typelib-1_0-gstrtsp-1_0Upgrade gstreamer-0_10-plugins-base-langUpgrade libgstinterfaces-0_10-0-32bitUpgrade libgsttag-1_0-0Upgrade gstreamer-0_10-plugins-baseUpgrade typelib-1_0-gstvideo-1_0Upgrade gstreamer-plugins-baseUpgrade gstreamer-0_10-plugins-base-32bitUpgrade libgstaudio-1_0-0Upgrade libgstpbutils-1_0-0-32bitUpgrade typelib-1_0-GstInterfaces-0_10Upgrade libgstapp-1_0-0Upgrade libgstfft-1_0-0-32bitUpgrade libgsttag-1_0-0-32bitUpgrade typelib-1_0-gstsdp-1_0Upgrade gstreamer-plugins-base-docUpgrade gstreamer-plugins-base-langUpgrade libgstallocators-1_0-0 | Jun 11, 2019 | Apr 24, 2019 |
| Ubuntu | — | Upgrade gstreamer1.0-plugins-baseUpgrade gstreamer0.10-plugins-base | May 4, 2019 | Apr 24, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub