CVE-2016-10198
Description
The gst_aac_parse_sink_setcaps function in gst/audioparsers/gstaacparse.c in gst-plugins-good in GStreamer before 1.10.3 allows remote attackers to cause a denial of service (invalid memory read and crash) via a crafted audio file.
Predictions
Heuristic predictions, AS-IS, for prioritization only.
Mitigations
Mitigation details
CVE-2016-10198 NameCVE-2016-10198 DescriptionThe gst_aac_parse_sink_setcaps function in gst/audioparsers/gstaacparse.c in gst-plugins-good in GStreamer before 1.10.3 allows remote attackers to cause a denial of service (invalid memory read and crash) via a crafted audio file. SourceCVE (at NVD; CERT, ENISA, LWN, oss-sec, fulldisc, Debian ELTS, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub…
CVE-2016-10198
| Name | CVE-2016-10198 |
| Description | The gst_aac_parse_sink_setcaps function in gst/audioparsers/gstaacparse.c in gst-plugins-good in GStreamer before 1.10.3 allows remote attackers to cause a denial of service (invalid memory read and crash) via a crafted audio file. |
| Source | CVE (at NVD; CERT, ENISA, LWN, oss-sec, fulldisc, Debian ELTS, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more) |
| References | DLA-2225-1, DLA-828-1, DSA-3820-1 |
Vulnerable and fixed packages
The table below lists information on source packages.
| Source Package | Release | Version | Status |
|---|---|---|---|
| gst-plugins-good1.0 (PTS) | bullseye | 1.18.4-2+deb11u2 | fixed |
| bullseye (security) | 1.18.4-2+deb11u4 | fixed | |
| bookworm | 1.22.0-5+deb12u3 | fixed | |
| bookworm (security) | 1.22.0-5+deb12u2 | fixed | |
| trixie | 1.26.2-1 | fixed | |
| trixie (security) | 1.26.2-1+deb13u1 | fixed | |
| forky, sid | 1.28.3-1 | fixed |
The information below is based on the following data on fixed versions.
| Package | Type | Release | Fixed Version | Urgency | Origin | Debian Bugs |
|---|---|---|---|---|---|---|
| gst-plugins-good0.10 | source | wheezy | 0.10.31-3+nmu1+deb7u2 | DLA-828-1 | ||
| gst-plugins-good0.10 | source | jessie | 0.10.31-3+nmu4+deb8u3 | DLA-2225-1 | ||
| gst-plugins-good0.10 | source | (unstable) | (unfixed) | low | ||
| gst-plugins-good1.0 | source | jessie | 1.4.4-2+deb8u3 | DSA-3820-1 | ||
| gst-plugins-good1.0 | source | (unstable) | 1.10.3-1 | low |
Notes
https://www.openwall.com/lists/oss-security/2017/02/01/7
https://bugzilla.gnome.org/show_bug.cgi?id=775450
Apply commands
https://www.openwall.com/lists/oss-security/2017/02/01/7https://bugzilla.gnome.org/show_bug.cgi?id=775450OS impact
SUSE Affected 1 release
| Version | Status | Fixed in |
|---|---|---|
| — | Affected | — |
Arch Fixed 1 release
| Version | Status | Fixed in |
|---|---|---|
| — | Fixed | 1.10.3-1 |
Debian Fixed 5 releases
| Version | Status | Fixed in |
|---|---|---|
| trixie | Fixed | 1.10.3-1 |
| sid | Fixed | 1.10.3-1 |
| forky | Fixed | 1.10.3-1 |
| bullseye | Fixed | 1.10.3-1 |
| bookworm | Fixed | 1.10.3-1 |
Application impact
| Vendor | Product | Versions | Fixed |
|---|---|---|---|
| gstreamer | gstreamer | {"endIncluding":"1.10.2"} | |
References
- https://www.suse.com/security/cve/CVE-2016-10198.html
- https://security.archlinux.org/ASA-201702-3
- http://www.debian.org/security/2017/dsa-3820
- http://www.openwall.com/lists/oss-security/2017/02/01/7
- http://www.openwall.com/lists/oss-security/2017/02/02/9
- http://www.securityfocus.com/bid/96001
- https://access.redhat.com/errata/RHSA-2017:2060
- https://bugzilla.gnome.org/show_bug.cgi?id=775450
- https://gstreamer.freedesktop.org/releases/1.10/#1.10.3
- https://lists.debian.org/debian-lts-announce/2020/05/msg00029.html
- https://security.gentoo.org/glsa/201705-10
- https://security-tracker.debian.org/tracker/CVE-2016-10198
CWEs
CWE-125
Community-verified mitigations for this CVE will appear above when contributors publish them.
Verify integrity in audit chain (admin only). AS-IS.