CVE-2016-9811
The windows_icon_typefind function in gst-plugins-base in GStreamer before 1.10.2, when G_SLICE...
4.7 MediumFix available
The windows_icon_typefind function in gst-plugins-base in GStreamer before 1.10.2, when G_SLICE is set to always-malloc, allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted ico file.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- High
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
2.29%Up 0.3 points since Feb 4, 2022
What each source reports
NVD Score used
The windows_icon_typefind function in gst-plugins-base in GStreamer before 1.10.2, when G_SLICE is set to always-malloc, allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted ico file.
- Record
CVE-2016-9811- CVSS 3.1
- 4.7 Medium
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H - CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:N/A:P - Weakness
- CWE-125
- Updated
- 2026-11-02
CVE List No score
The windows_icon_typefind function in gst-plugins-base in GStreamer before 1.10.2, when G_SLICE is set to always-malloc, allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted ico file.
- Record
CVE-2016-9811- Updated
- 2026-11-02
EUVDEUVD-2016-10612 No score
The windows_icon_typefind function in gst-plugins-base in GStreamer before 1.10.2, when G_SLICE is set to always-malloc, allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted ico file.
- Record
EUVD-2016-10612- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-f9mv-78h4-x2jx
The windows_icon_typefind function in gst-plugins-base in GStreamer before 1.10.2, when G_SLICE...
The windows_icon_typefind function in gst-plugins-base in GStreamer before 1.10.2, when G_SLICE is set to always-malloc, allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted ico file.
- Record
GHSA-f9mv-78h4-x2jx- CVSS 3.1
- 4.7 Medium
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H - Weakness
- CWE-125
- Updated
- 2026-11-02
OSVALPINE-CVE-2016-9811
The windows_icon_typefind function in gst-plugins-base in GStreamer before 1.10.2, when G_SLICE is set to always-malloc, allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted ico file.
- Record
ALPINE-CVE-2016-9811- CVSS 3.1
- 4.7 Medium
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVBELL-CVE-2016-9811
CVE-2016-9811 does not affect BellSoft software
- Record
BELL-CVE-2016-9811- CVSS 3.1
- 4.7 Medium
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
Show 11 moreShow less
OSV
The windows_icon_typefind function in gst-plugins-base in GStreamer before 1.10.2, when G_SLICE is set to always-malloc, allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted ico file.
- Record
CVE-2016-9811- CVSS 3.1
- 4.7 Medium
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2016-9811
The windows_icon_typefind function in gst-plugins-base in GStreamer before 1.10.2, when G_SLICE is set to always-malloc, allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted ico file.
- Record
DEBIAN-CVE-2016-9811- CVSS 3.1
- 4.7 Medium
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2017:2060
Red Hat Security Advisory: GStreamer security, bug fix, and enhancement update
- Record
RHSA-2017:2060- CVSS 3.0
- 5.5 Medium
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2016-9811
The windows_icon_typefind function in gst-plugins-base in GStreamer before 1.10.2, when G_SLICE is set to always-malloc, allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted ico file.
- Record
UBUNTU-CVE-2016-9811- CVSS 3.1
- 4.7 Medium
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H - CVSS 3.0
- 4.7 Medium
CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVMGASA-2017-0021 No score
Updated gstreamer packages fix security vulnerability
Out of bounds heap read in windows_icon_typefind() in gst/typefind/gsttypefindfunctions.c (CVE-2016-9811).
- Record
MGASA-2017-0021- Updated
- 2026-11-02
OSVSUSE-SU-2017:0189-1 No score
Security update for gstreamer-plugins-base
- CVE-2016-9811: out of bound memory read could lead to crash [bsc#1013669].
- Record
SUSE-SU-2017:0189-1- Updated
- 2026-11-02
OSVSUSE-SU-2017:0211-1 No score
Security update for gstreamer-plugins-base
This update for gstreamer-plugins-base fixes the following issues:
- CVE-2016-9811: Malicious file could could cause an invalid read leading to crash [bsc#1013669]
- Record
SUSE-SU-2017:0211-1- Updated
- 2026-11-02
OSVSUSE-SU-2017:0242-1 No score
Security update for gstreamer-0_10-plugins-base
This update for gstreamer-0_10-plugins-base fixes the following issue:
- CVE-2016-9811: out of bounds memory read in windows_icon_typefind (bsc#1013669)
- Record
SUSE-SU-2017:0242-1- Updated
- 2026-11-02
OSVSUSE-SU-2017:0263-1 No score
Security update for gstreamer-0_10-plugins-base
gstreamer-0_10-plugins-base was updated to fix one issue.
This security issue was fixed:
- CVE-2016-9811: Out of bounds memory read in windows_icon_typefind (bsc#1013669).
- Record
SUSE-SU-2017:0263-1- Updated
- 2026-11-02
OSVSUSE-SU-2017:0289-1 No score
Security update for gstreamer-0_10-plugins-base
This update for gstreamer-0_10-plugins-base fixes the following issue:
- CVE-2016-9811: Out of bounds memory read in windows_icon_typefind (bsc#1013669).
- Record
SUSE-SU-2017:0289-1- Updated
- 2026-11-02
OSVUSN-3244-1 No score
gst-plugins-base0.10, gst-plugins-base1.0 vulnerabilities
Hanno Böck discovered that GStreamer Base Plugins did not correctly handle certain malformed media files. If a user were tricked into opening a crafted media file with a GStreamer application, an attacker could cause a denial of service via application crash.
- Record
USN-3244-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
gst-plugins-base1Alpine:v3.4 |
before 1.8.3-r0 | 1.8.3-r0 |
gst-plugins-base1Alpine:v3.5 |
before 1.8.3-r0 | 1.8.3-r0 |
gst-plugins-base1.0Debian:12 |
before 1.10.2-1 | 1.10.2-1 |
gst-plugins-base1.0Debian:13 |
before 1.10.2-1 | 1.10.2-1 |
gst-plugins-base1.0Debian:14 |
before 1.10.2-1 | 1.10.2-1 |
gst-plugins-base0.10Debian:8 From an advisory covering 3 CVEs |
before 0.10.36-2+deb8u2, plus listed versions 0.10.36-20.10.36-2+deb8u1 |
0.10.36-2+deb8u2 |
gst-plugins-base0.10Debian:7 |
before 0.10.36-1.1+deb7u1, plus listed versions 0.10.36-1.1 |
0.10.36-1.1+deb7u1 |
gst-plugins-base1.0Debian:8 From an advisory covering 5 CVEs |
before 1.4.4-2+deb8u1, plus listed versions 1.4.4-2 |
1.4.4-2+deb8u1 |
gstreamer0.10-plugins-baseMageia:5 |
before 0.10.36-9.1.mga5 | 0.10.36-9.1.mga5 |
gstreamer1.0-plugins-baseMageia:5 |
before 1.4.3-2.1.mga5 | 1.4.3-2.1.mga5 |
Show 152 moreShow less
| Package | Affected | Fixed |
|---|---|---|
clutter-gst2-debuginfoRed Hat:enterprise_linux:7::client From an advisory covering 15 CVEs |
before 0:2.0.18-1.el7 | 0:2.0.18-1.el7 |
clutter-gst2-develRed Hat:enterprise_linux:7::client From an advisory covering 15 CVEs |
before 0:2.0.18-1.el7 | 0:2.0.18-1.el7 |
gstreamer-plugins-bad-free-debuginfoRed Hat:enterprise_linux:7::client From an advisory covering 15 CVEs |
before 0:0.10.23-23.el7 | 0:0.10.23-23.el7 |
gstreamer-plugins-bad-free-develRed Hat:enterprise_linux:7::client From an advisory covering 15 CVEs |
before 0:0.10.23-23.el7 | 0:0.10.23-23.el7 |
gstreamer-plugins-bad-free-devel-docsRed Hat:enterprise_linux:7::client From an advisory covering 15 CVEs |
before 0:0.10.23-23.el7 | 0:0.10.23-23.el7 |
gstreamer-plugins-good-devel-docsRed Hat:enterprise_linux:7::client From an advisory covering 15 CVEs |
before 0:0.10.31-13.el7 | 0:0.10.31-13.el7 |
gstreamer1-debuginfoRed Hat:enterprise_linux:7::client From an advisory covering 15 CVEs |
before 0:1.10.4-2.el7 | 0:1.10.4-2.el7 |
gstreamer1-develRed Hat:enterprise_linux:7::client From an advisory covering 15 CVEs |
before 0:1.10.4-2.el7 | 0:1.10.4-2.el7 |
gstreamer1-devel-docsRed Hat:enterprise_linux:7::client From an advisory covering 15 CVEs |
before 0:1.10.4-2.el7 | 0:1.10.4-2.el7 |
gstreamer1-plugins-bad-free-debuginfoRed Hat:enterprise_linux:7::client From an advisory covering 15 CVEs |
before 0:1.10.4-2.el7 | 0:1.10.4-2.el7 |
gstreamer1-plugins-bad-free-develRed Hat:enterprise_linux:7::client From an advisory covering 15 CVEs |
before 0:1.10.4-2.el7 | 0:1.10.4-2.el7 |
gstreamer1-plugins-bad-free-gtkRed Hat:enterprise_linux:7::client From an advisory covering 15 CVEs |
before 0:1.10.4-2.el7 | 0:1.10.4-2.el7 |
gstreamer1-plugins-base-debuginfoRed Hat:enterprise_linux:7::client From an advisory covering 15 CVEs |
before 0:1.10.4-1.el7 | 0:1.10.4-1.el7 |
gstreamer1-plugins-base-develRed Hat:enterprise_linux:7::client From an advisory covering 15 CVEs |
before 0:1.10.4-1.el7 | 0:1.10.4-1.el7 |
gstreamer1-plugins-base-devel-docsRed Hat:enterprise_linux:7::client From an advisory covering 15 CVEs |
before 0:1.10.4-1.el7 | 0:1.10.4-1.el7 |
gstreamer1-plugins-base-toolsRed Hat:enterprise_linux:7::client From an advisory covering 15 CVEs |
before 0:1.10.4-1.el7 | 0:1.10.4-1.el7 |
orc-compilerRed Hat:enterprise_linux:7::client From an advisory covering 15 CVEs |
before 0:0.4.26-1.el7 | 0:0.4.26-1.el7 |
orc-debuginfoRed Hat:enterprise_linux:7::client From an advisory covering 15 CVEs |
before 0:0.4.26-1.el7 | 0:0.4.26-1.el7 |
orc-develRed Hat:enterprise_linux:7::client From an advisory covering 15 CVEs |
before 0:0.4.26-1.el7 | 0:0.4.26-1.el7 |
orc-docRed Hat:enterprise_linux:7::client From an advisory covering 15 CVEs |
before 0:0.4.26-1.el7 | 0:0.4.26-1.el7 |
clutter-gst2Red Hat:enterprise_linux:7::client From an advisory covering 15 CVEs |
before 0:2.0.18-1.el7 | 0:2.0.18-1.el7 |
gnome-video-effectsRed Hat:enterprise_linux:7::client From an advisory covering 15 CVEs |
before 0:0.4.3-1.el7 | 0:0.4.3-1.el7 |
gstreamer-plugins-bad-freeRed Hat:enterprise_linux:7::client From an advisory covering 15 CVEs |
before 0:0.10.23-23.el7 | 0:0.10.23-23.el7 |
gstreamer-plugins-goodRed Hat:enterprise_linux:7::client From an advisory covering 15 CVEs |
before 0:0.10.31-13.el7 | 0:0.10.31-13.el7 |
gstreamer-plugins-good-debuginfoRed Hat:enterprise_linux:7::client From an advisory covering 15 CVEs |
before 0:0.10.31-13.el7 | 0:0.10.31-13.el7 |
gstreamer1Red Hat:enterprise_linux:7::client From an advisory covering 15 CVEs |
before 0:1.10.4-2.el7 | 0:1.10.4-2.el7 |
gstreamer1-plugins-bad-freeRed Hat:enterprise_linux:7::client From an advisory covering 15 CVEs |
before 0:1.10.4-2.el7 | 0:1.10.4-2.el7 |
gstreamer1-plugins-baseRed Hat:enterprise_linux:7::client From an advisory covering 15 CVEs |
before 0:1.10.4-1.el7 | 0:1.10.4-1.el7 |
gstreamer1-plugins-goodRed Hat:enterprise_linux:7::client From an advisory covering 15 CVEs |
before 0:1.10.4-2.el7 | 0:1.10.4-2.el7 |
gstreamer1-plugins-good-debuginfoRed Hat:enterprise_linux:7::client From an advisory covering 15 CVEs |
before 0:1.10.4-2.el7 | 0:1.10.4-2.el7 |
orcRed Hat:enterprise_linux:7::client From an advisory covering 15 CVEs |
before 0:0.4.26-1.el7 | 0:0.4.26-1.el7 |
clutter-gst2Red Hat:enterprise_linux:7::computenode From an advisory covering 15 CVEs |
before 0:2.0.18-1.el7 | 0:2.0.18-1.el7 |
clutter-gst2-debuginfoRed Hat:enterprise_linux:7::computenode From an advisory covering 15 CVEs |
before 0:2.0.18-1.el7 | 0:2.0.18-1.el7 |
clutter-gst2-develRed Hat:enterprise_linux:7::computenode From an advisory covering 15 CVEs |
before 0:2.0.18-1.el7 | 0:2.0.18-1.el7 |
gnome-video-effectsRed Hat:enterprise_linux:7::computenode From an advisory covering 15 CVEs |
before 0:0.4.3-1.el7 | 0:0.4.3-1.el7 |
gstreamer-plugins-good-devel-docsRed Hat:enterprise_linux:7::computenode From an advisory covering 15 CVEs |
before 0:0.10.31-13.el7 | 0:0.10.31-13.el7 |
gstreamer1-debuginfoRed Hat:enterprise_linux:7::computenode From an advisory covering 15 CVEs |
before 0:1.10.4-2.el7 | 0:1.10.4-2.el7 |
gstreamer1-develRed Hat:enterprise_linux:7::computenode From an advisory covering 15 CVEs |
before 0:1.10.4-2.el7 | 0:1.10.4-2.el7 |
gstreamer1-devel-docsRed Hat:enterprise_linux:7::computenode From an advisory covering 15 CVEs |
before 0:1.10.4-2.el7 | 0:1.10.4-2.el7 |
gstreamer1-plugins-bad-freeRed Hat:enterprise_linux:7::computenode From an advisory covering 15 CVEs |
before 0:1.10.4-2.el7 | 0:1.10.4-2.el7 |
gstreamer1-plugins-bad-free-debuginfoRed Hat:enterprise_linux:7::computenode From an advisory covering 15 CVEs |
before 0:1.10.4-2.el7 | 0:1.10.4-2.el7 |
gstreamer1-plugins-bad-free-develRed Hat:enterprise_linux:7::computenode From an advisory covering 15 CVEs |
before 0:1.10.4-2.el7 | 0:1.10.4-2.el7 |
gstreamer1-plugins-bad-free-gtkRed Hat:enterprise_linux:7::computenode From an advisory covering 15 CVEs |
before 0:1.10.4-2.el7 | 0:1.10.4-2.el7 |
gstreamer1-plugins-base-debuginfoRed Hat:enterprise_linux:7::computenode From an advisory covering 15 CVEs |
before 0:1.10.4-1.el7 | 0:1.10.4-1.el7 |
gstreamer1-plugins-base-develRed Hat:enterprise_linux:7::computenode From an advisory covering 15 CVEs |
before 0:1.10.4-1.el7 | 0:1.10.4-1.el7 |
gstreamer1-plugins-base-devel-docsRed Hat:enterprise_linux:7::computenode From an advisory covering 15 CVEs |
before 0:1.10.4-1.el7 | 0:1.10.4-1.el7 |
gstreamer1-plugins-base-toolsRed Hat:enterprise_linux:7::computenode From an advisory covering 15 CVEs |
before 0:1.10.4-1.el7 | 0:1.10.4-1.el7 |
gstreamer1-plugins-goodRed Hat:enterprise_linux:7::computenode From an advisory covering 15 CVEs |
before 0:1.10.4-2.el7 | 0:1.10.4-2.el7 |
gstreamer1-plugins-good-debuginfoRed Hat:enterprise_linux:7::computenode From an advisory covering 15 CVEs |
before 0:1.10.4-2.el7 | 0:1.10.4-2.el7 |
orc-compilerRed Hat:enterprise_linux:7::computenode From an advisory covering 15 CVEs |
before 0:0.4.26-1.el7 | 0:0.4.26-1.el7 |
orc-debuginfoRed Hat:enterprise_linux:7::computenode From an advisory covering 15 CVEs |
before 0:0.4.26-1.el7 | 0:0.4.26-1.el7 |
orc-develRed Hat:enterprise_linux:7::computenode From an advisory covering 15 CVEs |
before 0:0.4.26-1.el7 | 0:0.4.26-1.el7 |
orc-docRed Hat:enterprise_linux:7::computenode From an advisory covering 15 CVEs |
before 0:0.4.26-1.el7 | 0:0.4.26-1.el7 |
gstreamer-plugins-goodRed Hat:enterprise_linux:7::computenode From an advisory covering 15 CVEs |
before 0:0.10.31-13.el7 | 0:0.10.31-13.el7 |
gstreamer-plugins-good-debuginfoRed Hat:enterprise_linux:7::computenode From an advisory covering 15 CVEs |
before 0:0.10.31-13.el7 | 0:0.10.31-13.el7 |
gstreamer1Red Hat:enterprise_linux:7::computenode From an advisory covering 15 CVEs |
before 0:1.10.4-2.el7 | 0:1.10.4-2.el7 |
gstreamer1-plugins-baseRed Hat:enterprise_linux:7::computenode From an advisory covering 15 CVEs |
before 0:1.10.4-1.el7 | 0:1.10.4-1.el7 |
orcRed Hat:enterprise_linux:7::computenode From an advisory covering 15 CVEs |
before 0:0.4.26-1.el7 | 0:0.4.26-1.el7 |
clutter-gst2-debuginfoRed Hat:enterprise_linux:7::server From an advisory covering 15 CVEs |
before 0:2.0.18-1.el7 | 0:2.0.18-1.el7 |
clutter-gst2-develRed Hat:enterprise_linux:7::server From an advisory covering 15 CVEs |
before 0:2.0.18-1.el7 | 0:2.0.18-1.el7 |
gstreamer-plugins-bad-free-debuginfoRed Hat:enterprise_linux:7::server From an advisory covering 15 CVEs |
before 0:0.10.23-23.el7 | 0:0.10.23-23.el7 |
gstreamer-plugins-bad-free-develRed Hat:enterprise_linux:7::server From an advisory covering 15 CVEs |
before 0:0.10.23-23.el7 | 0:0.10.23-23.el7 |
gstreamer-plugins-bad-free-devel-docsRed Hat:enterprise_linux:7::server From an advisory covering 15 CVEs |
before 0:0.10.23-23.el7 | 0:0.10.23-23.el7 |
gstreamer-plugins-good-devel-docsRed Hat:enterprise_linux:7::server From an advisory covering 15 CVEs |
before 0:0.10.31-13.el7 | 0:0.10.31-13.el7 |
gstreamer1-devel-docsRed Hat:enterprise_linux:7::server From an advisory covering 15 CVEs |
before 0:1.10.4-2.el7 | 0:1.10.4-2.el7 |
gstreamer1-plugins-bad-free-debuginfoRed Hat:enterprise_linux:7::server From an advisory covering 15 CVEs |
before 0:1.10.4-2.el7 | 0:1.10.4-2.el7 |
gstreamer1-plugins-bad-free-develRed Hat:enterprise_linux:7::server From an advisory covering 15 CVEs |
before 0:1.10.4-2.el7 | 0:1.10.4-2.el7 |
gstreamer1-plugins-bad-free-gtkRed Hat:enterprise_linux:7::server From an advisory covering 15 CVEs |
before 0:1.10.4-2.el7 | 0:1.10.4-2.el7 |
gstreamer1-plugins-base-debuginfoRed Hat:enterprise_linux:7::server From an advisory covering 15 CVEs |
before 0:1.10.4-1.el7 | 0:1.10.4-1.el7 |
gstreamer1-plugins-base-devel-docsRed Hat:enterprise_linux:7::server From an advisory covering 15 CVEs |
before 0:1.10.4-1.el7 | 0:1.10.4-1.el7 |
gstreamer1-plugins-base-toolsRed Hat:enterprise_linux:7::server From an advisory covering 15 CVEs |
before 0:1.10.4-1.el7 | 0:1.10.4-1.el7 |
orc-compilerRed Hat:enterprise_linux:7::server From an advisory covering 15 CVEs |
before 0:0.4.26-1.el7 | 0:0.4.26-1.el7 |
orc-debuginfoRed Hat:enterprise_linux:7::server From an advisory covering 15 CVEs |
before 0:0.4.26-1.el7 | 0:0.4.26-1.el7 |
orc-develRed Hat:enterprise_linux:7::server From an advisory covering 15 CVEs |
before 0:0.4.26-1.el7 | 0:0.4.26-1.el7 |
orc-docRed Hat:enterprise_linux:7::server From an advisory covering 15 CVEs |
before 0:0.4.26-1.el7 | 0:0.4.26-1.el7 |
clutter-gst2Red Hat:enterprise_linux:7::server From an advisory covering 15 CVEs |
before 0:2.0.18-1.el7 | 0:2.0.18-1.el7 |
gnome-video-effectsRed Hat:enterprise_linux:7::server From an advisory covering 15 CVEs |
before 0:0.4.3-1.el7 | 0:0.4.3-1.el7 |
gstreamer-plugins-bad-freeRed Hat:enterprise_linux:7::server From an advisory covering 15 CVEs |
before 0:0.10.23-23.el7 | 0:0.10.23-23.el7 |
gstreamer-plugins-goodRed Hat:enterprise_linux:7::server From an advisory covering 15 CVEs |
before 0:0.10.31-13.el7 | 0:0.10.31-13.el7 |
gstreamer-plugins-good-debuginfoRed Hat:enterprise_linux:7::server From an advisory covering 15 CVEs |
before 0:0.10.31-13.el7 | 0:0.10.31-13.el7 |
gstreamer1Red Hat:enterprise_linux:7::server From an advisory covering 15 CVEs |
before 0:1.10.4-2.el7 | 0:1.10.4-2.el7 |
gstreamer1-debuginfoRed Hat:enterprise_linux:7::server From an advisory covering 15 CVEs |
before 0:1.10.4-2.el7 | 0:1.10.4-2.el7 |
gstreamer1-develRed Hat:enterprise_linux:7::server From an advisory covering 15 CVEs |
before 0:1.10.4-2.el7 | 0:1.10.4-2.el7 |
gstreamer1-plugins-bad-freeRed Hat:enterprise_linux:7::server From an advisory covering 15 CVEs |
before 0:1.10.4-2.el7 | 0:1.10.4-2.el7 |
gstreamer1-plugins-baseRed Hat:enterprise_linux:7::server From an advisory covering 15 CVEs |
before 0:1.10.4-1.el7 | 0:1.10.4-1.el7 |
gstreamer1-plugins-base-develRed Hat:enterprise_linux:7::server From an advisory covering 15 CVEs |
before 0:1.10.4-1.el7 | 0:1.10.4-1.el7 |
gstreamer1-plugins-goodRed Hat:enterprise_linux:7::server From an advisory covering 15 CVEs |
before 0:1.10.4-2.el7 | 0:1.10.4-2.el7 |
gstreamer1-plugins-good-debuginfoRed Hat:enterprise_linux:7::server From an advisory covering 15 CVEs |
before 0:1.10.4-2.el7 | 0:1.10.4-2.el7 |
orcRed Hat:enterprise_linux:7::server From an advisory covering 15 CVEs |
before 0:0.4.26-1.el7 | 0:0.4.26-1.el7 |
clutter-gst2-debuginfoRed Hat:enterprise_linux:7::workstation From an advisory covering 15 CVEs |
before 0:2.0.18-1.el7 | 0:2.0.18-1.el7 |
clutter-gst2-develRed Hat:enterprise_linux:7::workstation From an advisory covering 15 CVEs |
before 0:2.0.18-1.el7 | 0:2.0.18-1.el7 |
gstreamer-plugins-bad-free-debuginfoRed Hat:enterprise_linux:7::workstation From an advisory covering 15 CVEs |
before 0:0.10.23-23.el7 | 0:0.10.23-23.el7 |
gstreamer-plugins-bad-free-develRed Hat:enterprise_linux:7::workstation From an advisory covering 15 CVEs |
before 0:0.10.23-23.el7 | 0:0.10.23-23.el7 |
gstreamer-plugins-bad-free-devel-docsRed Hat:enterprise_linux:7::workstation From an advisory covering 15 CVEs |
before 0:0.10.23-23.el7 | 0:0.10.23-23.el7 |
gstreamer-plugins-good-devel-docsRed Hat:enterprise_linux:7::workstation From an advisory covering 15 CVEs |
before 0:0.10.31-13.el7 | 0:0.10.31-13.el7 |
gstreamer1-devel-docsRed Hat:enterprise_linux:7::workstation From an advisory covering 15 CVEs |
before 0:1.10.4-2.el7 | 0:1.10.4-2.el7 |
gstreamer1-plugins-bad-free-debuginfoRed Hat:enterprise_linux:7::workstation From an advisory covering 15 CVEs |
before 0:1.10.4-2.el7 | 0:1.10.4-2.el7 |
gstreamer1-plugins-bad-free-develRed Hat:enterprise_linux:7::workstation From an advisory covering 15 CVEs |
before 0:1.10.4-2.el7 | 0:1.10.4-2.el7 |
gstreamer1-plugins-bad-free-gtkRed Hat:enterprise_linux:7::workstation From an advisory covering 15 CVEs |
before 0:1.10.4-2.el7 | 0:1.10.4-2.el7 |
gstreamer1-plugins-base-debuginfoRed Hat:enterprise_linux:7::workstation From an advisory covering 15 CVEs |
before 0:1.10.4-1.el7 | 0:1.10.4-1.el7 |
gstreamer1-plugins-base-devel-docsRed Hat:enterprise_linux:7::workstation From an advisory covering 15 CVEs |
before 0:1.10.4-1.el7 | 0:1.10.4-1.el7 |
gstreamer1-plugins-base-toolsRed Hat:enterprise_linux:7::workstation From an advisory covering 15 CVEs |
before 0:1.10.4-1.el7 | 0:1.10.4-1.el7 |
orc-compilerRed Hat:enterprise_linux:7::workstation From an advisory covering 15 CVEs |
before 0:0.4.26-1.el7 | 0:0.4.26-1.el7 |
orc-debuginfoRed Hat:enterprise_linux:7::workstation From an advisory covering 15 CVEs |
before 0:0.4.26-1.el7 | 0:0.4.26-1.el7 |
orc-develRed Hat:enterprise_linux:7::workstation From an advisory covering 15 CVEs |
before 0:0.4.26-1.el7 | 0:0.4.26-1.el7 |
orc-docRed Hat:enterprise_linux:7::workstation From an advisory covering 15 CVEs |
before 0:0.4.26-1.el7 | 0:0.4.26-1.el7 |
clutter-gst2Red Hat:enterprise_linux:7::workstation From an advisory covering 15 CVEs |
before 0:2.0.18-1.el7 | 0:2.0.18-1.el7 |
gnome-video-effectsRed Hat:enterprise_linux:7::workstation From an advisory covering 15 CVEs |
before 0:0.4.3-1.el7 | 0:0.4.3-1.el7 |
gstreamer-plugins-bad-freeRed Hat:enterprise_linux:7::workstation From an advisory covering 15 CVEs |
before 0:0.10.23-23.el7 | 0:0.10.23-23.el7 |
gstreamer-plugins-goodRed Hat:enterprise_linux:7::workstation From an advisory covering 15 CVEs |
before 0:0.10.31-13.el7 | 0:0.10.31-13.el7 |
gstreamer-plugins-good-debuginfoRed Hat:enterprise_linux:7::workstation From an advisory covering 15 CVEs |
before 0:0.10.31-13.el7 | 0:0.10.31-13.el7 |
gstreamer1Red Hat:enterprise_linux:7::workstation From an advisory covering 15 CVEs |
before 0:1.10.4-2.el7 | 0:1.10.4-2.el7 |
gstreamer1-debuginfoRed Hat:enterprise_linux:7::workstation From an advisory covering 15 CVEs |
before 0:1.10.4-2.el7 | 0:1.10.4-2.el7 |
gstreamer1-develRed Hat:enterprise_linux:7::workstation From an advisory covering 15 CVEs |
before 0:1.10.4-2.el7 | 0:1.10.4-2.el7 |
gstreamer1-plugins-bad-freeRed Hat:enterprise_linux:7::workstation From an advisory covering 15 CVEs |
before 0:1.10.4-2.el7 | 0:1.10.4-2.el7 |
gstreamer1-plugins-baseRed Hat:enterprise_linux:7::workstation From an advisory covering 15 CVEs |
before 0:1.10.4-1.el7 | 0:1.10.4-1.el7 |
gstreamer1-plugins-base-develRed Hat:enterprise_linux:7::workstation From an advisory covering 15 CVEs |
before 0:1.10.4-1.el7 | 0:1.10.4-1.el7 |
gstreamer1-plugins-goodRed Hat:enterprise_linux:7::workstation From an advisory covering 15 CVEs |
before 0:1.10.4-2.el7 | 0:1.10.4-2.el7 |
gstreamer1-plugins-good-debuginfoRed Hat:enterprise_linux:7::workstation From an advisory covering 15 CVEs |
before 0:1.10.4-2.el7 | 0:1.10.4-2.el7 |
orcRed Hat:enterprise_linux:7::workstation From an advisory covering 15 CVEs |
before 0:0.4.26-1.el7 | 0:0.4.26-1.el7 |
gstreamer-plugins-baseSUSE:Linux Enterprise Desktop 12 SP1 |
before 1.2.4-2.3.2 | 1.2.4-2.3.2 |
gstreamer-plugins-baseSUSE:Linux Enterprise Software Development Kit 12 SP1 |
before 1.2.4-2.3.2 | 1.2.4-2.3.2 |
gstreamer-plugins-baseSUSE:Linux Enterprise Software Development Kit 12 SP2 |
before 1.2.4-2.3.2 | 1.2.4-2.3.2 |
gstreamer-plugins-baseSUSE:Linux Enterprise Server 12 SP1 |
before 1.2.4-2.3.2 | 1.2.4-2.3.2 |
gstreamer-plugins-baseSUSE:Linux Enterprise Server for SAP Applications 12 SP1 |
before 1.2.4-2.3.2 | 1.2.4-2.3.2 |
gstreamer-plugins-baseSUSE:Linux Enterprise Workstation Extension 12 SP1 |
before 1.2.4-2.3.2 | 1.2.4-2.3.2 |
gstreamer-plugins-baseSUSE:Linux Enterprise Desktop 12 SP2 |
before 1.8.3-9.6 | 1.8.3-9.6 |
gstreamer-plugins-baseSUSE:Linux Enterprise Server for Raspberry Pi 12 SP2 |
before 1.8.3-9.6 | 1.8.3-9.6 |
gstreamer-plugins-baseSUSE:Linux Enterprise Software Development Kit 12 SP2 |
before 1.8.3-9.6 | 1.8.3-9.6 |
gstreamer-plugins-baseSUSE:Linux Enterprise Server 12 SP2 |
before 1.8.3-9.6 | 1.8.3-9.6 |
gstreamer-plugins-baseSUSE:Linux Enterprise Server for SAP Applications 12 SP2 |
before 1.8.3-9.6 | 1.8.3-9.6 |
gstreamer-plugins-baseSUSE:Linux Enterprise Workstation Extension 12 SP2 |
before 1.8.3-9.6 | 1.8.3-9.6 |
gstreamer-0_10-plugins-baseSUSE:Linux Enterprise Desktop 12 SP2 |
before 0.10.36-14.1 | 0.10.36-14.1 |
gstreamer-0_10-plugins-baseSUSE:Linux Enterprise Software Development Kit 12 SP2 |
before 0.10.36-14.1 | 0.10.36-14.1 |
gstreamer-0_10-plugins-baseSUSE:Linux Enterprise Server 12 SP2 |
before 0.10.36-14.1 | 0.10.36-14.1 |
gstreamer-0_10-plugins-baseSUSE:Linux Enterprise Server for SAP Applications 12 SP2 |
before 0.10.36-14.1 | 0.10.36-14.1 |
gstreamer-0_10-plugins-baseSUSE:Linux Enterprise Workstation Extension 12 SP2 |
before 0.10.36-14.1 | 0.10.36-14.1 |
gstreamer-0_10-plugins-baseSUSE:Linux Enterprise Desktop 12 SP1 |
before 0.10.36-11.3.1 | 0.10.36-11.3.1 |
gstreamer-0_10-plugins-baseSUSE:Linux Enterprise Software Development Kit 12 SP1 |
before 0.10.36-11.3.1 | 0.10.36-11.3.1 |
gstreamer-0_10-plugins-baseSUSE:Linux Enterprise Server 12 SP1 |
before 0.10.36-11.3.1 | 0.10.36-11.3.1 |
gstreamer-0_10-plugins-baseSUSE:Linux Enterprise Server for SAP Applications 12 SP1 |
before 0.10.36-11.3.1 | 0.10.36-11.3.1 |
gstreamer-0_10-plugins-baseSUSE:Linux Enterprise Workstation Extension 12 SP1 |
before 0.10.36-11.3.1 | 0.10.36-11.3.1 |
gstreamer-0_10-plugins-baseSUSE:Linux Enterprise Software Development Kit 11 SP4 |
before 0.10.35-5.17.1 | 0.10.35-5.17.1 |
gstreamer-0_10-plugins-baseSUSE:Linux Enterprise Server 11 SP4 |
before 0.10.35-5.17.1 | 0.10.35-5.17.1 |
gstreamer-0_10-plugins-baseSUSE:Linux Enterprise Server for SAP Applications 11 SP4 |
before 0.10.35-5.17.1 | 0.10.35-5.17.1 |
gst-plugins-base0.10Ubuntu:14.04:LTS |
before 0.10.36-1.1ubuntu2.1, plus listed versions 0.10.36-1.1ubuntu10.10.36-1.1ubuntu2 |
0.10.36-1.1ubuntu2.1 |
gst-plugins-base1.0Ubuntu:14.04:LTS |
before 1.2.4-1~ubuntu2.1, plus listed versions 1.2.0-1ubuntu11.2.1-2ubuntu11.2.1-2ubuntu21.2.2-1ubuntu11.2.3-11.2.4-1~ubuntu11.2.4-1~ubuntu2 |
1.2.4-1~ubuntu2.1 |
gst-plugins-base0.10Ubuntu:16.04:LTS |
before 0.10.36-2ubuntu0.1, plus listed versions 0.10.36-2 |
0.10.36-2ubuntu0.1 |
gst-plugins-base1.0Ubuntu:16.04:LTS |
before 1.8.3-1ubuntu0.2, plus listed versions 1.6.0-1ubuntu11.6.1-1ubuntu11.6.2-1ubuntu11.7.1-1ubuntu11.7.2-1ubuntu1 Show 7 moreShow less1.7.90-1ubuntu11.7.91-1ubuntu11.8.0-1ubuntu11.8.1-1ubuntu0.11.8.2-1ubuntu0.11.8.2-1ubuntu0.21.8.3-1ubuntu0.1 |
1.8.3-1ubuntu0.2 |
gst-plugins-base0.10Ubuntu:14.04:LTS From an advisory covering 5 CVEs |
before 0.10.36-1.1ubuntu2.1, plus listed versions 0.10.36-1.1ubuntu10.10.36-1.1ubuntu2 |
0.10.36-1.1ubuntu2.1 |
gst-plugins-base1.0Ubuntu:14.04:LTS From an advisory covering 5 CVEs |
before 1.2.4-1~ubuntu2.1, plus listed versions 1.2.0-1ubuntu11.2.1-2ubuntu11.2.1-2ubuntu21.2.2-1ubuntu11.2.3-11.2.4-1~ubuntu11.2.4-1~ubuntu2 |
1.2.4-1~ubuntu2.1 |
gst-plugins-base1.0Ubuntu:16.04:LTS From an advisory covering 5 CVEs |
before 1.8.3-1ubuntu0.2, plus listed versions 1.6.0-1ubuntu11.6.1-1ubuntu11.6.2-1ubuntu11.7.1-1ubuntu11.7.2-1ubuntu1 Show 7 moreShow less1.7.90-1ubuntu11.7.91-1ubuntu11.8.0-1ubuntu11.8.1-1ubuntu0.11.8.2-1ubuntu0.11.8.2-1ubuntu0.21.8.3-1ubuntu0.1 |
1.8.3-1ubuntu0.2 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2016-9811 is a medium vulnerability (CVSS 4.7) in Gstreamer, published December 7, 2016. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.29%, the 83rd percentile. Fixed in gst-plugins-base1 1.8.3-r0.
References
debian.org/security/2017/dsa-3819
bugzilla.gnome.org/show_bug.cgi?id=774902
gstreamer.freedesktop.org/releases/1.10
securityfocus.com/bid/95161
access.redhat.com/errata/RHSA-2017:2060
openwall.com/lists/oss-security/2016/12/05/8
Show 99 moreShow less
security.gentoo.org/glsa/201705-10
lists.debian.org/debian-lts-announce/2020/02/msg00032.html
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UM7IXFGHV66KNWGWG6ZBDNKXD2UJL2VQ
nvd.nist.gov/vuln/detail/CVE-2016-9811
github.com/advisories/GHSA-f9mv-78h4-x2jx
security.alpinelinux.org/vuln/CVE-2016-9811
docs.bell-sw.com/security/cves/CVE-2016-9811
security-tracker.debian.org/tracker/CVE-2016-9811
advisories.mageia.org/MGASA-2017-0021.html
bugs.mageia.org/show_bug.cgi?id=19897
bugzilla.redhat.com/show_bug.cgi?id=1265905
security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_2060.json
cve.org/CVERecord?id=CVE-2016-9446
scarybeastsecurity.blogspot.sk/2016/11/0day-poc-risky-design-decisions-in.html
suse.com/support/update/announcement/2017/suse-su-20170189-1
bugzilla.suse.com/1013669
ubuntu.com/security/CVE-2016-9811