CVE-2016-9811
Fixed in a distro release EPSS 2%
The windows_icon_typefind function in gst-plugins-base in GStreamer before 1.10.2, when G_SLICE is set to always-malloc, allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted ico file.
Products: gstreamer, fedoraproject fedora, debian_linux, redhat enterprise_linux_desktop, redhat enterprise_linux_eus, redhat enterprise_linux_server, redhat enterprise_linux_server_aus, redhat enterprise_linux_server_tus, redhat enterprise_linux_workstation
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Alpine 3.4 | gst-plugins-base1 | 1.8.3-r0 |
| Alpine 3.5 | gst-plugins-base1 | 1.8.3-r0 |
| Debian 12 | gst-plugins-base1.0 | 1.10.2-1 |
| Debian 13 | gst-plugins-base1.0 | 1.10.2-1 |
| Debian 14 | gst-plugins-base1.0 | 1.10.2-1 |
| Debian 7 | gst-plugins-base0.10 | 0.10.36-1.1+deb7u1 |
| Debian 8 | gst-plugins-base0.10 | 0.10.36-2+deb8u2 |
| Debian 8 | gst-plugins-base1.0 | 1.4.4-2+deb8u1 |
| Red Hat Enterprise Linux 7 | clutter-gst2 | 0:2.0.18-1.el7 |
| Red Hat Enterprise Linux 7 | clutter-gst2-debuginfo | 0:2.0.18-1.el7 |
| Red Hat Enterprise Linux 7 | clutter-gst2-devel | 0:2.0.18-1.el7 |
| Red Hat Enterprise Linux 7 | gnome-video-effects | 0:0.4.3-1.el7 |
| Red Hat Enterprise Linux 7 | gstreamer-plugins-bad-free | 0:0.10.23-23.el7 |
| Red Hat Enterprise Linux 7 | gstreamer-plugins-bad-free-debuginfo | 0:0.10.23-23.el7 |
| Red Hat Enterprise Linux 7 | gstreamer-plugins-bad-free-devel | 0:0.10.23-23.el7 |
| Red Hat Enterprise Linux 7 | gstreamer-plugins-bad-free-devel-docs | 0:0.10.23-23.el7 |
| Red Hat Enterprise Linux 7 | gstreamer-plugins-good | 0:0.10.31-13.el7 |
| Red Hat Enterprise Linux 7 | gstreamer-plugins-good-debuginfo | 0:0.10.31-13.el7 |
| Red Hat Enterprise Linux 7 | gstreamer-plugins-good-devel-docs | 0:0.10.31-13.el7 |
| Red Hat Enterprise Linux 7 | gstreamer1 | 0:1.10.4-2.el7 |
| Red Hat Enterprise Linux 7 | gstreamer1-debuginfo | 0:1.10.4-2.el7 |
| Red Hat Enterprise Linux 7 | gstreamer1-devel | 0:1.10.4-2.el7 |
| Red Hat Enterprise Linux 7 | gstreamer1-devel-docs | 0:1.10.4-2.el7 |
| Red Hat Enterprise Linux 7 | gstreamer1-plugins-bad-free | 0:1.10.4-2.el7 |
| Red Hat Enterprise Linux 7 | gstreamer1-plugins-bad-free-debuginfo | 0:1.10.4-2.el7 |
| Red Hat Enterprise Linux 7 | gstreamer1-plugins-bad-free-devel | 0:1.10.4-2.el7 |
| Red Hat Enterprise Linux 7 | gstreamer1-plugins-bad-free-gtk | 0:1.10.4-2.el7 |
| Red Hat Enterprise Linux 7 | gstreamer1-plugins-base | 0:1.10.4-1.el7 |
| Red Hat Enterprise Linux 7 | gstreamer1-plugins-base-debuginfo | 0:1.10.4-1.el7 |
| Red Hat Enterprise Linux 7 | gstreamer1-plugins-base-devel | 0:1.10.4-1.el7 |
| Red Hat Enterprise Linux 7 | gstreamer1-plugins-base-devel-docs | 0:1.10.4-1.el7 |
| Red Hat Enterprise Linux 7 | gstreamer1-plugins-base-tools | 0:1.10.4-1.el7 |
| Red Hat Enterprise Linux 7 | gstreamer1-plugins-good | 0:1.10.4-2.el7 |
| Red Hat Enterprise Linux 7 | gstreamer1-plugins-good-debuginfo | 0:1.10.4-2.el7 |
| Red Hat Enterprise Linux 7 | orc | 0:0.4.26-1.el7 |
| Red Hat Enterprise Linux 7 | orc-compiler | 0:0.4.26-1.el7 |
| Red Hat Enterprise Linux 7 | orc-debuginfo | 0:0.4.26-1.el7 |
| Red Hat Enterprise Linux 7 | orc-devel | 0:0.4.26-1.el7 |
| Red Hat Enterprise Linux 7 | orc-doc | 0:0.4.26-1.el7 |
| SUSE Linux Enterprise Desktop 12 SP1 | gstreamer-0_10-plugins-base | 0.10.36-11.3.1 |
| SUSE Linux Enterprise Desktop 12 SP1 | gstreamer-plugins-base | 1.2.4-2.3.2 |
| SUSE Linux Enterprise Desktop 12 SP2 | gstreamer-0_10-plugins-base | 0.10.36-14.1 |
| SUSE Linux Enterprise Desktop 12 SP2 | gstreamer-plugins-base | 1.8.3-9.6 |
| SUSE Linux Enterprise Server 11 SP4 | gstreamer-0_10-plugins-base | 0.10.35-5.17.1 |
| SUSE Linux Enterprise Server 12 SP1 | gstreamer-0_10-plugins-base | 0.10.36-11.3.1 |
| SUSE Linux Enterprise Server 12 SP1 | gstreamer-plugins-base | 1.2.4-2.3.2 |
| SUSE Linux Enterprise Server 12 SP2 | gstreamer-0_10-plugins-base | 0.10.36-14.1 |
| SUSE Linux Enterprise Server 12 SP2 | gstreamer-plugins-base | 1.8.3-9.6 |
| SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 | gstreamer-plugins-base | 1.8.3-9.6 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | gstreamer-0_10-plugins-base | 0.10.35-5.17.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | gstreamer-0_10-plugins-base | 0.10.36-11.3.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | gstreamer-plugins-base | 1.2.4-2.3.2 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | gstreamer-0_10-plugins-base | 0.10.36-14.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | gstreamer-plugins-base | 1.8.3-9.6 |
| SUSE Linux Enterprise Software Development Kit 11 SP4 | gstreamer-0_10-plugins-base | 0.10.35-5.17.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP1 | gstreamer-0_10-plugins-base | 0.10.36-11.3.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP1 | gstreamer-plugins-base | 1.2.4-2.3.2 |
| SUSE Linux Enterprise Software Development Kit 12 SP2 | gstreamer-0_10-plugins-base | 0.10.36-14.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP2 | gstreamer-plugins-base | 1.2.4-2.3.2 |
| SUSE Linux Enterprise Software Development Kit 12 SP2 | gstreamer-plugins-base | 1.8.3-9.6 |
| SUSE Linux Enterprise Workstation Extension 12 SP1 | gstreamer-0_10-plugins-base | 0.10.36-11.3.1 |
| SUSE Linux Enterprise Workstation Extension 12 SP1 | gstreamer-plugins-base | 1.2.4-2.3.2 |
| SUSE Linux Enterprise Workstation Extension 12 SP2 | gstreamer-0_10-plugins-base | 0.10.36-14.1 |
| SUSE Linux Enterprise Workstation Extension 12 SP2 | gstreamer-plugins-base | 1.8.3-9.6 |
| Ubuntu 14.04 LTS | gst-plugins-base0.10 | 0.10.36-1.1ubuntu2.1 |
| Ubuntu 14.04 LTS | gst-plugins-base1.0 | 1.2.4-1~ubuntu2.1 |
| Ubuntu 16.04 LTS | gst-plugins-base0.10 | 0.10.36-2ubuntu0.1 |
| Ubuntu 16.04 LTS | gst-plugins-base1.0 | 1.8.3-1ubuntu0.2 |