CVE-2016-9812: High severity GStreamer GStreamer vulnerability
Published Jan 13, 2017
·Updated
The gstmpegtssectionnew function in the mpegts decoder in GStreamer before 1.10.2 allows remote attackers to cause a denial of service (out-of-bounds read) via a too small section.
Affected Software
1 affected component
GStreamer GStreamer<=1.10.1
Event History
Jan 13, 2017
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Data Sourced
via NVD·04:59 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2016-9812?
CVE-2016-9812 has a severity rating that indicates a potential denial of service vulnerability due to an out-of-bounds read.
2
How do I fix CVE-2016-9812?
To fix CVE-2016-9812, upgrade GStreamer to version 1.10.2 or later.
3
What causes CVE-2016-9812?
CVE-2016-9812 is caused by the gst_mpegts_section_new function allowing a denial of service via a too small section.
4
Which versions of GStreamer are affected by CVE-2016-9812?
CVE-2016-9812 affects GStreamer versions prior to 1.10.2, specifically version 1.10.1 and earlier.
5
What types of attacks can CVE-2016-9812 be exploited for?
CVE-2016-9812 can be exploited by remote attackers to cause a denial of service via out-of-bounds read.