CVE-2016-9808
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2016-9808
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2016-9808.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2016-9808
- Downstream
- Related
- Published
- 2017-01-13T16:59:01.043Z
- Modified
- 2025-11-14T04:53:41.620368Z
- Severity
-
- 7.5 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
- Summary
- [none]
- Details
-
The FLIC decoder in GStreamer before 1.10.2 allows remote attackers to cause a denial of service (out-of-bounds write and crash) via a crafted series of skip and count pairs.
- References
-
- http://rhn.redhat.com/errata/RHSA-2016-2975.html
- http://rhn.redhat.com/errata/RHSA-2017-0019.html
- http://rhn.redhat.com/errata/RHSA-2017-0020.html
- http://www.openwall.com/lists/oss-security/2016/12/01/2
- http://www.openwall.com/lists/oss-security/2016/12/05/8
- http://www.securityfocus.com/bid/95446
- https://gstreamer.freedesktop.org/releases/1.10/#1.10.2
- https://scarybeastsecurity.blogspot.com/2016/11/0day-poc-incorrect-fix-for-gstreamer.html
- https://security.gentoo.org/glsa/201705-10
Affected packages
Git / gitlab.freedesktop.org/gstreamer/gst-plugins-good
Affected ranges
- Type
- GIT
- Repo
- https://gitlab.freedesktop.org/gstreamer/gst-plugins-good
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedLast affected
Affected versions
1.*
1.0.0
1.0.1
1.0.2
1.1.1
1.1.2
1.1.3
1.1.4
1.1.90
1.10.0
1.10.1
1.2.0
1.3.1
1.3.2
1.3.3
1.3.90
1.3.91
1.4.0
1.5.1
1.5.2
1.5.90
1.5.91
1.6.0
1.7.1
1.7.2
1.7.90
1.7.91
1.8.0
1.9.1
1.9.2
1.9.90
Other
BEFORE_INDENT
BRANCH-ERROR-ROOT
BRANCH-EVENTS2-ROOT
BRANCH-GSTREAMER-0_8-ROOT
CAPS
CAPS-MERGE-3
CAPS-ROOT
CHANGELOG_START
GIT_CONVERSION
MOVE-TO-FDO
OSLOSUMMIT1-200303051
RELEASE-0_10_0
RELEASE-0_10_1
RELEASE-0_10_11
RELEASE-0_10_14
RELEASE-0_10_2
RELEASE-0_10_3
RELEASE-0_10_4
RELEASE-0_10_5
RELEASE-0_10_6
RELEASE-0_10_7
RELEASE-0_10_8
RELEASE-0_10_9
RELEASE-0_9_1
RELEASE-0_9_3
RELEASE-0_9_4
RELEASE-0_9_5
RELEASE-0_9_6
RELEASE-0_9_7
TYPEFIND-ROOT
start
RELEASE-0.*
RELEASE-0.10.15
RELEASE-0.10.16
RELEASE-0.10.17
RELEASE-0.10.18
RELEASE-0.10.19
RELEASE-0.10.20
RELEASE-0.10.21
RELEASE-0.10.22
RELEASE-0.10.23
RELEASE-0.10.24
RELEASE-0.10.25
RELEASE-0.10.26
RELEASE-0.10.27
RELEASE-0.10.28
RELEASE-0.10.29
RELEASE-0.10.30
RELEASE-0.11.1
RELEASE-0.11.2
RELEASE-0.11.90
RELEASE-0.11.91
RELEASE-0.11.92
RELEASE-0.11.93
RELEASE-0.11.94
RELEASE-0.11.99