Denial of Service Vulnerability in GStreamer gst-plugins-base1 Package
Summary
ALPINE-CVE-2016-9811: The windows_icon_typefind function in gst-plugins-base in GStreamer before 1.10.2, when G_SLICE is set to always-malloc, allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted ico file. Affects gst-plugins-base1 versions < 1.8.3-r0. Fixed in 1.8.3-r0. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
GStreamer is a powerful multimedia framework that allows the construction of graphs of media-handling components. The gst-plugins-base1 package is a collection of essential plugins for GStreamer, providing basic functionalities for media processing. This package is widely used in various applications for handling audio and video streams. However, it has been identified to have a vulnerability that can lead to denial of service under specific conditions.
Vulnerability Detail
The vulnerability arises from the windows_icon_typefind function in the gst-plugins-base package, which is part of GStreamer prior to version 1.10.2. When the G_SLICE is set to always-malloc, this function is susceptible to an out-of-bounds read when processing crafted ICO files. Attackers can exploit this vulnerability to cause a denial of service, potentially crashing the application that relies on this package. The CVSS score for this vulnerability is 4.7, indicating a moderate severity level.
How To Fix
Minimum fixed version
1.8.3-r0
This is the first release that contains the fix.
sudo apk add --upgrade gst-plugins-base1Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a workaround, if immediate upgrading is not possible, consider disabling the processing of ICO files or implementing input validation to filter out potentially malicious files until the package can be updated.
Conclusion
The identified vulnerability in the GStreamer gst-plugins-base1 package poses a risk of denial of service through crafted ICO files. It is crucial to update to the patched version to mitigate this risk. Utilizing tools like Vulert can help monitor and manage vulnerabilities effectively.
See every vulnerability recorded for gst-plugins-base1 →
FAQ
The vulnerability allows remote attackers to cause a denial of service through an out-of-bounds read when processing crafted ICO files.
The vulnerability affects GStreamer versions prior to 1.10.2, specifically the gst-plugins-base1 package in Alpine v3.4 and v3.5.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
If you cannot update the package, consider implementing input validation or disabling the processing of ICO files as a temporary workaround.
Vulert monitors and alerts for open-source vulnerabilities in your software using just a manifest file like package-lock.json, providing real-time insights into potential security issues.
References
Related vulnerabilities
Recent vulnerabilities recorded for gst-plugins-base1.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
