CVE-2016-9809
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2016-9809
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-9809.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2016-9809
- Related
- Published
- 2017-01-13T16:59:01Z
- Modified
- 2024-11-21T07:51:18.290534Z
- Severity
-
- 7.8 (High) CVSS_V3 - CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVSS Calculator
- Summary
- [none]
- Details
-
Off-by-one error in the gsth264parsesetcaps function in GStreamer before 1.10.2 allows remote attackers to have unspecified impact via a crafted file, which triggers an out-of-bounds read.
- References
-
- http://rhn.redhat.com/errata/RHSA-2017-0018.html
- http://rhn.redhat.com/errata/RHSA-2017-0021.html
- http://www.debian.org/security/2017/dsa-3818
- http://www.securityfocus.com/bid/95147
- https://gstreamer.freedesktop.org/releases/1.10/#1.10.2
- https://security.gentoo.org/glsa/201705-10
- http://www.openwall.com/lists/oss-security/2016/12/01/2
- http://www.openwall.com/lists/oss-security/2016/12/05/8
- https://bugzilla.gnome.org/show_bug.cgi?id=774896
- https://lists.debian.org/debian-lts-announce/2020/03/msg00038.html
- https://security.alpinelinux.org/vuln/CVE-2016-9809
- https://security-tracker.debian.org/tracker/CVE-2016-9809
Affected packages
Alpine:v3.4 / gst-plugins-bad1
Package
- Name
- gst-plugins-bad1
- Purl
- pkg:apk/alpine/gst-plugins-bad1?arch=source
Alpine:v3.5 / gst-plugins-bad1
Package
- Name
- gst-plugins-bad1
- Purl
- pkg:apk/alpine/gst-plugins-bad1?arch=source
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed1.8.3-r0
Affected versions
1.*
1.0.0-r0
1.0.1-r0
1.0.2-r0
1.0.3-r0
1.0.4-r0
1.0.5-r0
1.0.6-r0
1.0.7-r0
1.0.8-r0
1.0.9-r0
1.0.10-r0
1.2.0-r0
1.2.1-r0
1.2.2-r0
1.2.3-r0
1.2.4-r0
1.4.0-r0
1.4.1-r0
1.4.2-r0
1.4.3-r0
1.4.4-r0
1.4.4-r1
1.4.4-r2
1.5.2-r0
1.6.1-r0
1.6.3-r0
1.8.0-r0
1.8.1-r0
1.8.1-r1
1.8.1-r2
1.8.1-r3
Debian:11 / gst-plugins-bad1.0
Package
- Name
- gst-plugins-bad1.0
- Purl
- pkg:deb/debian/gst-plugins-bad1.0?arch=source
Debian:12 / gst-plugins-bad1.0
Package
- Name
- gst-plugins-bad1.0
- Purl
- pkg:deb/debian/gst-plugins-bad1.0?arch=source
Debian:13 / gst-plugins-bad1.0
Package
- Name
- gst-plugins-bad1.0
- Purl
- pkg:deb/debian/gst-plugins-bad1.0?arch=source
Git / gitlab.freedesktop.org/gstreamer/gst-plugins-good
Affected ranges
- Type
- GIT
- Repo
- https://gitlab.freedesktop.org/gstreamer/gst-plugins-good
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedLast affected
Affected versions
1.*
1.0.0
1.0.1
1.0.2
1.1.1
1.1.2
1.1.3
1.1.4
1.1.90
1.10.0
1.10.1
1.2.0
1.3.1
1.3.2
1.3.3
1.3.90
1.3.91
1.4.0
1.5.1
1.5.2
1.5.90
1.5.91
1.6.0
1.7.1
1.7.2
1.7.90
1.7.91
1.8.0
1.9.1
1.9.2
1.9.90
Other
BEFORE_INDENT
BRANCH-ERROR-ROOT
BRANCH-EVENTS2-ROOT
BRANCH-GSTREAMER-0_8-ROOT
CAPS
CAPS-MERGE-3
CAPS-ROOT
CHANGELOG_START
GIT_CONVERSION
MOVE-TO-FDO
OSLOSUMMIT1-200303051
RELEASE-0_10_0
RELEASE-0_10_1
RELEASE-0_10_11
RELEASE-0_10_14
RELEASE-0_10_2
RELEASE-0_10_3
RELEASE-0_10_4
RELEASE-0_10_5
RELEASE-0_10_6
RELEASE-0_10_7
RELEASE-0_10_8
RELEASE-0_10_9
RELEASE-0_9_1
RELEASE-0_9_3
RELEASE-0_9_4
RELEASE-0_9_5
RELEASE-0_9_6
RELEASE-0_9_7
TYPEFIND-ROOT
start
RELEASE-0.*
RELEASE-0.10.15
RELEASE-0.10.16
RELEASE-0.10.17
RELEASE-0.10.18
RELEASE-0.10.19
RELEASE-0.10.20
RELEASE-0.10.21
RELEASE-0.10.22
RELEASE-0.10.23
RELEASE-0.10.24
RELEASE-0.10.25
RELEASE-0.10.26
RELEASE-0.10.27
RELEASE-0.10.28
RELEASE-0.10.29
RELEASE-0.10.30
RELEASE-0.11.1
RELEASE-0.11.2
RELEASE-0.11.90
RELEASE-0.11.91
RELEASE-0.11.92
RELEASE-0.11.93
RELEASE-0.11.94
RELEASE-0.11.99