CVE-2016-9635
Fixed in a distro release EPSS 9%
Heap-based buffer overflow in the flx_decode_delta_fli function in gst/flx/gstflxdec.c in the FLIC decoder in GStreamer before 1.10.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) by providing a 'skip count' that goes beyond initialized buffer.
Products: gstreamer, redhat enterprise_linux_desktop, redhat enterprise_linux_hpc_node, redhat enterprise_linux_server, redhat enterprise_linux_workstation, debian_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Alpine 3.4 | gst-plugins-good1 | 1.8.3-r0 |
| Alpine 3.5 | gst-plugins-good1 | 1.8.3-r0 |
| Alpine 3.6 | gst-plugins-good1 | 1.10.4-r0 |
| Alpine 3.7 | gst-plugins-good | 1.10.4-r0 |
| Debian 12 | gst-plugins-good1.0 | 1.10.1-2 |
| Debian 13 | gst-plugins-good1.0 | 1.10.1-2 |
| Debian 14 | gst-plugins-good1.0 | 1.10.1-2 |
| Debian 7 | gst-plugins-good0.10 | 0.10.31-3+nmu1+deb7u1 |
| Debian 8 | gst-plugins-good0.10 | 0.10.31-3+nmu4+deb8u2 |
| Debian 8 | gst-plugins-good1.0 | 1.4.4-2+deb8u2 |
| Red Hat Enterprise Linux 6 | gstreamer-plugins-good | 0:0.10.23-4.el6_8 |
| Red Hat Enterprise Linux 6 | gstreamer-plugins-good-debuginfo | 0:0.10.23-4.el6_8 |
| Red Hat Enterprise Linux 6 | gstreamer-plugins-good-devel | 0:0.10.23-4.el6_8 |
| Red Hat Enterprise Linux 7 | gstreamer-plugins-good | 0:0.10.31-12.el7_3 |
| Red Hat Enterprise Linux 7 | gstreamer-plugins-good-debuginfo | 0:0.10.31-12.el7_3 |
| Red Hat Enterprise Linux 7 | gstreamer-plugins-good-devel-docs | 0:0.10.31-12.el7_3 |
| Red Hat Enterprise Linux 7 | gstreamer1-plugins-good | 0:1.4.5-3.el7_3 |
| Red Hat Enterprise Linux 7 | gstreamer1-plugins-good-debuginfo | 0:1.4.5-3.el7_3 |
| SUSE Linux Enterprise Desktop 12 SP1 | gstreamer-0_10-plugins-good | 0.10.31-13.3.3 |
| SUSE Linux Enterprise Desktop 12 SP1 | gstreamer-plugins-good | 1.2.4-2.3.1 |
| SUSE Linux Enterprise Desktop 12 SP2 | gstreamer-0_10-plugins-good | 0.10.31-16.1 |
| SUSE Linux Enterprise Desktop 12 SP2 | gstreamer-plugins-good | 1.8.3-9.1 |
| SUSE Linux Enterprise Server 11 SP4 | gstreamer-0_10-plugins-good | 0.10.30-5.14.1 |
| SUSE Linux Enterprise Server 12 SP1 | gstreamer-plugins-good | 1.2.4-2.3.1 |
| SUSE Linux Enterprise Server 12 SP2 | gstreamer-plugins-good | 1.8.3-9.1 |
| SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 | gstreamer-plugins-good | 1.8.3-9.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | gstreamer-0_10-plugins-good | 0.10.30-5.14.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | gstreamer-plugins-good | 1.2.4-2.3.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | gstreamer-plugins-good | 1.8.3-9.1 |
| SUSE Linux Enterprise Workstation Extension 12 SP1 | gstreamer-0_10-plugins-good | 0.10.31-13.3.3 |
| SUSE Linux Enterprise Workstation Extension 12 SP2 | gstreamer-0_10-plugins-good | 0.10.31-16.1 |
| Ubuntu 14.04 LTS | gst-plugins-good0.10 | 0.10.31-3+nmu1ubuntu5.1 |
| Ubuntu 14.04 LTS | gst-plugins-good1.0 | 1.2.4-1~ubuntu1.1 |
| Ubuntu 16.04 LTS | gst-plugins-good0.10 | 0.10.31-3+nmu4ubuntu2.16.04.1 |
| Ubuntu 16.04 LTS | gst-plugins-good1.0 | 1.8.2-1ubuntu0.2 |