Vulnerability-Lookup

CVE-2016-9635 (GCVE-0-2016-9635)

Vulnerability from cvelistv5 – Published: 2017-01-27 22:01 – Updated: 2024-08-06 02:59

Summary

Heap-based buffer overflow in the flx_decode_delta_fli function in gst/flx/gstflxdec.c in the FLIC decoder in GStreamer before 1.10.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) by providing a 'skip count' that goes beyond initialized buffer.

Severity

9.8 (Critical)


                        
                          CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE

Assigner

mitre CNA under the mitre root

CNA scorecard E 28/100 over 2362 records in the last 180 days details

References

11 references

URL	Tags
http://www.debian.org/security/2016/dsa-3724	vendor-advisoryx_refsource_DEBIAN
http://rhn.redhat.com/errata/RHSA-2017-0019.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2016-2975.html	vendor-advisoryx_refsource_REDHAT
http://www.debian.org/security/2016/dsa-3723	vendor-advisoryx_refsource_DEBIAN
http://rhn.redhat.com/errata/RHSA-2017-0020.html	vendor-advisoryx_refsource_REDHAT
http://www.securityfocus.com/bid/94499	vdb-entryx_refsource_BID
https://gstreamer.freedesktop.org/releases/1.10/#1.10.2	x_refsource_CONFIRM
http://www.openwall.com/lists/oss-security/2016/11/24/2	mailing-listx_refsource_MLIST
https://bugzilla.gnome.org/show_bug.cgi?id=774834	x_refsource_CONFIRM
https://security.gentoo.org/glsa/201705-10	vendor-advisoryx_refsource_GENTOO
https://scarybeastsecurity.blogspot.com/2016/11/0…	x_refsource_MISC

Date Public

2016-11-23 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T02:59:03.142Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "DSA-3724",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2016/dsa-3724"
          },
          {
            "name": "RHSA-2017:0019",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0019.html"
          },
          {
            "name": "RHSA-2016:2975",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-2975.html"
          },
          {
            "name": "DSA-3723",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2016/dsa-3723"
          },
          {
            "name": "RHSA-2017:0020",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0020.html"
          },
          {
            "name": "94499",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/94499"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://gstreamer.freedesktop.org/releases/1.10/#1.10.2"
          },
          {
            "name": "[oss-security] 20161123 Re: CVE Request: gstreamer plugins",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/11/24/2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.gnome.org/show_bug.cgi?id=774834"
          },
          {
            "name": "GLSA-201705-10",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201705-10"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://scarybeastsecurity.blogspot.com/2016/11/0day-exploit-advancing-exploitation.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-11-23T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Heap-based buffer overflow in the flx_decode_delta_fli function in gst/flx/gstflxdec.c in the FLIC decoder in GStreamer before 1.10.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) by providing a \u0027skip count\u0027 that goes beyond initialized buffer."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "DSA-3724",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2016/dsa-3724"
        },
        {
          "name": "RHSA-2017:0019",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0019.html"
        },
        {
          "name": "RHSA-2016:2975",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-2975.html"
        },
        {
          "name": "DSA-3723",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2016/dsa-3723"
        },
        {
          "name": "RHSA-2017:0020",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0020.html"
        },
        {
          "name": "94499",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/94499"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://gstreamer.freedesktop.org/releases/1.10/#1.10.2"
        },
        {
          "name": "[oss-security] 20161123 Re: CVE Request: gstreamer plugins",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/11/24/2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.gnome.org/show_bug.cgi?id=774834"
        },
        {
          "name": "GLSA-201705-10",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201705-10"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://scarybeastsecurity.blogspot.com/2016/11/0day-exploit-advancing-exploitation.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2016-9635",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Heap-based buffer overflow in the flx_decode_delta_fli function in gst/flx/gstflxdec.c in the FLIC decoder in GStreamer before 1.10.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) by providing a \u0027skip count\u0027 that goes beyond initialized buffer."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "DSA-3724",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2016/dsa-3724"
            },
            {
              "name": "RHSA-2017:0019",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2017-0019.html"
            },
            {
              "name": "RHSA-2016:2975",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-2975.html"
            },
            {
              "name": "DSA-3723",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2016/dsa-3723"
            },
            {
              "name": "RHSA-2017:0020",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2017-0020.html"
            },
            {
              "name": "94499",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/94499"
            },
            {
              "name": "https://gstreamer.freedesktop.org/releases/1.10/#1.10.2",
              "refsource": "CONFIRM",
              "url": "https://gstreamer.freedesktop.org/releases/1.10/#1.10.2"
            },
            {
              "name": "[oss-security] 20161123 Re: CVE Request: gstreamer plugins",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2016/11/24/2"
            },
            {
              "name": "https://bugzilla.gnome.org/show_bug.cgi?id=774834",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.gnome.org/show_bug.cgi?id=774834"
            },
            {
              "name": "GLSA-201705-10",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201705-10"
            },
            {
              "name": "https://scarybeastsecurity.blogspot.com/2016/11/0day-exploit-advancing-exploitation.html",
              "refsource": "MISC",
              "url": "https://scarybeastsecurity.blogspot.com/2016/11/0day-exploit-advancing-exploitation.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2016-9635",
    "datePublished": "2017-01-27T22:01:00.000Z",
    "dateReserved": "2016-11-23T00:00:00.000Z",
    "dateUpdated": "2024-08-06T02:59:03.142Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2016-9635",
      "date": "2026-10-16",
      "epss": "0.08839",
      "percentile": "0.95146"
    },
    "fkie_nvd": {
      "configurations": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:gstreamer:gstreamer:*:*:*:*:*:*:*:*",
                  "matchCriteriaId": "E205DF55-52AD-46B7-B83E-2FDB322A52A2",
                  "versionEndIncluding": "1.10.1",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        },
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
                  "matchCriteriaId": "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:redhat:enterprise_linux_hpc_node:6.0:*:*:*:*:*:*:*",
                  "matchCriteriaId": "C2FAC325-6EEB-466D-9EBA-8ED4DBC9CFBF",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
                  "matchCriteriaId": "9BBCD86A-E6C7-4444-9D74-F861084090F0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
                  "matchCriteriaId": "E5ED5807-55B7-47C5-97A6-03233F4FBC3A",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        },
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
                  "matchCriteriaId": "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Heap-based buffer overflow in the flx_decode_delta_fli function in gst/flx/gstflxdec.c in the FLIC decoder in GStreamer before 1.10.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) by providing a \u0027skip count\u0027 that goes beyond initialized buffer."
        },
        {
          "lang": "es",
          "value": "Desbordamiento de b\u00fafer basado en memoria din\u00e1mica en la funci\u00f3n flx_decode_delta_fli en gst/flx/gstflxdec.c en el decoder FLIC en GStreamer en versiones anteriores a 1.10.2 permite a atacantes remotos ejecutar c\u00f3digo arbitrario o provocar una denegaci\u00f3n de servicio (ca\u00edda de la aplicaci\u00f3n) proporcionando un \u0027recuento de saltos\u0027 que va m\u00e1s all\u00e1 del b\u00fafer inicializado."
        }
      ],
      "id": "CVE-2016-9635",
      "lastModified": "2024-11-21T03:01:32.620",
      "metrics": {
        "cvssMetricV2": [
          {
            "acInsufInfo": false,
            "baseSeverity": "HIGH",
            "cvssData": {
              "accessComplexity": "LOW",
              "accessVector": "NETWORK",
              "authentication": "NONE",
              "availabilityImpact": "PARTIAL",
              "baseScore": 7.5,
              "confidentialityImpact": "PARTIAL",
              "integrityImpact": "PARTIAL",
              "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
              "version": "2.0"
            },
            "exploitabilityScore": 10.0,
            "impactScore": 6.4,
            "obtainAllPrivilege": false,
            "obtainOtherPrivilege": false,
            "obtainUserPrivilege": false,
            "source": "nvd@nist.gov",
            "type": "Primary",
            "userInteractionRequired": false
          }
        ],
        "cvssMetricV30": [
          {
            "cvssData": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 9.8,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.0"
            },
            "exploitabilityScore": 3.9,
            "impactScore": 5.9,
            "source": "nvd@nist.gov",
            "type": "Primary"
          }
        ]
      },
      "published": "2017-01-27T22:59:01.990",
      "references": [
        {
          "source": "cve@mitre.org",
          "tags": [
            "Third Party Advisory"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-2975.html"
        },
        {
          "source": "cve@mitre.org",
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0019.html"
        },
        {
          "source": "cve@mitre.org",
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0020.html"
        },
        {
          "source": "cve@mitre.org",
          "tags": [
            "Third Party Advisory"
          ],
          "url": "http://www.debian.org/security/2016/dsa-3723"
        },
        {
          "source": "cve@mitre.org",
          "tags": [
            "Third Party Advisory"
          ],
          "url": "http://www.debian.org/security/2016/dsa-3724"
        },
        {
          "source": "cve@mitre.org",
          "tags": [
            "Mailing List",
            "Third Party Advisory"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/11/24/2"
        },
        {
          "source": "cve@mitre.org",
          "tags": [
            "Third Party Advisory",
            "VDB Entry"
          ],
          "url": "http://www.securityfocus.com/bid/94499"
        },
        {
          "source": "cve@mitre.org",
          "tags": [
            "Issue Tracking"
          ],
          "url": "https://bugzilla.gnome.org/show_bug.cgi?id=774834"
        },
        {
          "source": "cve@mitre.org",
          "tags": [
            "Release Notes",
            "Vendor Advisory"
          ],
          "url": "https://gstreamer.freedesktop.org/releases/1.10/#1.10.2"
        },
        {
          "source": "cve@mitre.org",
          "tags": [
            "Exploit",
            "Technical Description"
          ],
          "url": "https://scarybeastsecurity.blogspot.com/2016/11/0day-exploit-advancing-exploitation.html"
        },
        {
          "source": "cve@mitre.org",
          "url": "https://security.gentoo.org/glsa/201705-10"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "tags": [
            "Third Party Advisory"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-2975.html"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0019.html"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0020.html"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "tags": [
            "Third Party Advisory"
          ],
          "url": "http://www.debian.org/security/2016/dsa-3723"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "tags": [
            "Third Party Advisory"
          ],
          "url": "http://www.debian.org/security/2016/dsa-3724"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "tags": [
            "Mailing List",
            "Third Party Advisory"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/11/24/2"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "tags": [
            "Third Party Advisory",
            "VDB Entry"
          ],
          "url": "http://www.securityfocus.com/bid/94499"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "tags": [
            "Issue Tracking"
          ],
          "url": "https://bugzilla.gnome.org/show_bug.cgi?id=774834"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "tags": [
            "Release Notes",
            "Vendor Advisory"
          ],
          "url": "https://gstreamer.freedesktop.org/releases/1.10/#1.10.2"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "tags": [
            "Exploit",
            "Technical Description"
          ],
          "url": "https://scarybeastsecurity.blogspot.com/2016/11/0day-exploit-advancing-exploitation.html"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "https://security.gentoo.org/glsa/201705-10"
        }
      ],
      "sourceIdentifier": "cve@mitre.org",
      "vulnStatus": "Modified",
      "weaknesses": [
        {
          "description": [
            {
              "lang": "en",
              "value": "CWE-119"
            }
          ],
          "source": "nvd@nist.gov",
          "type": "Primary"
        }
      ]
    },
    "nvd": {
      "cve": {
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:a:gstreamer:gstreamer:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "E205DF55-52AD-46B7-B83E-2FDB322A52A2",
                    "versionEndIncluding": "1.10.1",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:redhat:enterprise_linux_hpc_node:6.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "C2FAC325-6EEB-466D-9EBA-8ED4DBC9CFBF",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "9BBCD86A-E6C7-4444-9D74-F861084090F0",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "E5ED5807-55B7-47C5-97A6-03233F4FBC3A",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "Heap-based buffer overflow in the flx_decode_delta_fli function in gst/flx/gstflxdec.c in the FLIC decoder in GStreamer before 1.10.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) by providing a \u0027skip count\u0027 that goes beyond initialized buffer."
          },
          {
            "lang": "es",
            "value": "Desbordamiento de b\u00fafer basado en memoria din\u00e1mica en la funci\u00f3n flx_decode_delta_fli en gst/flx/gstflxdec.c en el decoder FLIC en GStreamer en versiones anteriores a 1.10.2 permite a atacantes remotos ejecutar c\u00f3digo arbitrario o provocar una denegaci\u00f3n de servicio (ca\u00edda de la aplicaci\u00f3n) proporcionando un \u0027recuento de saltos\u0027 que va m\u00e1s all\u00e1 del b\u00fafer inicializado."
          }
        ],
        "id": "CVE-2016-9635",
        "lastModified": "2026-05-13T00:24:29.033",
        "metrics": {
          "cvssMetricV2": [
            {
              "acInsufInfo": false,
              "baseSeverity": "HIGH",
              "cvssData": {
                "accessComplexity": "LOW",
                "accessVector": "NETWORK",
                "authentication": "NONE",
                "availabilityImpact": "PARTIAL",
                "baseScore": 7.5,
                "confidentialityImpact": "PARTIAL",
                "integrityImpact": "PARTIAL",
                "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
                "version": "2.0"
              },
              "exploitabilityScore": 10.0,
              "impactScore": 6.4,
              "obtainAllPrivilege": false,
              "obtainOtherPrivilege": false,
              "obtainUserPrivilege": false,
              "source": "nvd@nist.gov",
              "type": "Primary",
              "userInteractionRequired": false
            }
          ],
          "cvssMetricV30": [
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "HIGH",
                "baseScore": 9.8,
                "baseSeverity": "CRITICAL",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                "version": "3.0"
              },
              "exploitabilityScore": 3.9,
              "impactScore": 5.9,
              "source": "nvd@nist.gov",
              "type": "Primary"
            }
          ]
        },
        "published": "2017-01-27T22:59:01.990",
        "references": [
          {
            "source": "cve@mitre.org",
            "tags": [
              "Third Party Advisory"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-2975.html"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0019.html"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0020.html"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Third Party Advisory"
            ],
            "url": "http://www.debian.org/security/2016/dsa-3723"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Third Party Advisory"
            ],
            "url": "http://www.debian.org/security/2016/dsa-3724"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Mailing List",
              "Third Party Advisory"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/11/24/2"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Third Party Advisory",
              "VDB Entry"
            ],
            "url": "http://www.securityfocus.com/bid/94499"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Issue Tracking"
            ],
            "url": "https://bugzilla.gnome.org/show_bug.cgi?id=774834"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Release Notes",
              "Vendor Advisory"
            ],
            "url": "https://gstreamer.freedesktop.org/releases/1.10/#1.10.2"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Exploit",
              "Technical Description"
            ],
            "url": "https://scarybeastsecurity.blogspot.com/2016/11/0day-exploit-advancing-exploitation.html"
          },
          {
            "source": "cve@mitre.org",
            "url": "https://security.gentoo.org/glsa/201705-10"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Third Party Advisory"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-2975.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0019.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0020.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Third Party Advisory"
            ],
            "url": "http://www.debian.org/security/2016/dsa-3723"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Third Party Advisory"
            ],
            "url": "http://www.debian.org/security/2016/dsa-3724"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Mailing List",
              "Third Party Advisory"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/11/24/2"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Third Party Advisory",
              "VDB Entry"
            ],
            "url": "http://www.securityfocus.com/bid/94499"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Issue Tracking"
            ],
            "url": "https://bugzilla.gnome.org/show_bug.cgi?id=774834"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Release Notes",
              "Vendor Advisory"
            ],
            "url": "https://gstreamer.freedesktop.org/releases/1.10/#1.10.2"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Exploit",
              "Technical Description"
            ],
            "url": "https://scarybeastsecurity.blogspot.com/2016/11/0day-exploit-advancing-exploitation.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "https://security.gentoo.org/glsa/201705-10"
          }
        ],
        "sourceIdentifier": "cve@mitre.org",
        "vulnStatus": "Modified",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-119"
              }
            ],
            "source": "nvd@nist.gov",
            "type": "Primary"
          }
        ]
      }
    },
    "redhat_vex": {
      "aggregate_severity": "Important",
      "current_release_date": "2026-07-31T09:53:19+00:00",
      "cve": "CVE-2016-9635",
      "id": "CVE-2016-9635",
      "initial_release_date": "2016-11-21T00:00:00+00:00",
      "product_status:fixed": "118",
      "product_status:known_affected": "4",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "gstreamer-plugins-good: Heap buffer overflow in FLIC decoder",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2016/cve-2016-9635.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-07-26T00:51:01Z",
      "cve": "CVE-2016-9635",
      "id": "CVE-2016-9635",
      "initial_release_date": "2023-02-15T04:55:21Z",
      "product_status:known_affected": "32",
      "product_status:recommended": "86",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2016-9635",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2016-9635.json",
      "version": "14"
    }
  }
}

CLEANSTART-2026-LU26408 (CVE-2016-9635)

Vulnerability from cleanstart – Published: 2026-10-14 00:42 – Updated: 2026-10-13 12:21 – Source website

Summary

Heap-based buffer overflow in the flx_decode_delta_fli function in gst/flx/gstflxdec

Details

Security vulnerability affects the gst-plugins-good package. Heap-based buffer overflow in the flx_decode_delta_fli function in gst/flx/gstflxdec.

Severity

9.8 (Critical)


                    
                      CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

URL

Type

	https://github.com/cleanstart-dev/cleanstart-secu…	ADVISORY
	https://osv.dev/vulnerability/CVE-2016-9635	WEB
	https://nvd.nist.gov/vuln/detail/CVE-2016-9635	WEB

JSON

To clipboard

{
  "affected": [
    {
      "package": {
        "ecosystem": "CleanStart",
        "name": "gst-plugins-good",
        "purl": "pkg:apk/cleanstart/gst-plugins-good"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.10.4-r0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "credits": [],
  "database_specific": {},
  "details": "Security vulnerability affects the gst-plugins-good package. Heap-based buffer overflow in the flx_decode_delta_fli function in gst/flx/gstflxdec.",
  "id": "CLEANSTART-2026-LU26408",
  "modified": "2026-10-13T12:21:07Z",
  "published": "2026-10-14T00:42:55.508098Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-LU26408.json"
    },
    {
      "type": "WEB",
      "url": "https://osv.dev/vulnerability/CVE-2016-9635"
    },
    {
      "type": "WEB",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-9635"
    }
  ],
  "related": [],
  "schema_version": "1.7.3",
  "severity": [
    {
      "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
      "type": "CVSS_V3"
    }
  ],
  "summary": "Heap-based buffer overflow in the flx_decode_delta_fli function in gst/flx/gstflxdec",
  "upstream": [
    "CVE-2016-9635"
  ]
}

CNVD-2016-11620

Vulnerability from cnvd - Published: 2016-11-29

Title

GStreamer Good Plug-ins skip count缓冲区溢出漏洞

Description

GStreamer是GNOME桌面环境下用来创建流媒体应用的多媒体框架。 GStreamer Good Plug-ins中存在缓冲区溢出漏洞。攻击者利用漏洞可在运行受影响的应用程序的用户上下文中执行任意代码，导致拒绝服务条件。

Severity

中

Formal description

厂商尚未提供漏洞修复方案，请关注厂商主页更新： https://gstreamer.freedesktop.org/modules/gst-plugins-good.html

Reference

http://www.securityfocus.com/bid/94499

Impacted products

Name
['Ubuntu Ubuntu Linux 12.04 LTS amd64', 'Ubuntu Ubuntu Linux 12.04 LTS i386', 'Ubuntu Ubuntu Linux 16.04 LTS', 'GStreamer GStreamer Good Plug-ins', 'debian Debian Linux 6.0 sparc', 'debian Debian Linux 6.0 s/390', 'debian Debian Linux 6.0 powerpc', 'debian Debian Linux 6.0 mips', 'debian Debian Linux 6.0 ia-64', 'debian Debian Linux 6.0 ia-32', 'debian Debian Linux 6.0 arm', 'debian Debian Linux 6.0 amd64', 'Ubuntu Ubuntu Linux 16.10', 'Ubuntu Ubuntu Linux 14.04 LTS', 'Ubuntu Ubuntu Linux 12.04 LTS']

Name

['Ubuntu Ubuntu Linux 12.04 LTS amd64', 'Ubuntu Ubuntu Linux 12.04 LTS i386', 'Ubuntu Ubuntu Linux 16.04 LTS', 'GStreamer GStreamer Good Plug-ins', 'debian Debian Linux 6.0 sparc', 'debian Debian Linux 6.0 s/390', 'debian Debian Linux 6.0 powerpc', 'debian Debian Linux 6.0 mips', 'debian Debian Linux 6.0 ia-64', 'debian Debian Linux 6.0 ia-32', 'debian Debian Linux 6.0 arm', 'debian Debian Linux 6.0 amd64', 'Ubuntu Ubuntu Linux 16.10', 'Ubuntu Ubuntu Linux 14.04 LTS', 'Ubuntu Ubuntu Linux 12.04 LTS']

Show details on source website

JSON

To clipboard

{
  "bids": {
    "bid": {
      "bidNumber": "94499"
    }
  },
  "cves": {
    "cve": {
      "cveNumber": "CVE-2016-9635"
    }
  },
  "description": "GStreamer\u662fGNOME\u684c\u9762\u73af\u5883\u4e0b\u7528\u6765\u521b\u5efa\u6d41\u5a92\u4f53\u5e94\u7528\u7684\u591a\u5a92\u4f53\u6846\u67b6\u3002\r\n\r\nGStreamer Good Plug-ins\u4e2d\u5b58\u5728\u7f13\u51b2\u533a\u6ea2\u51fa\u6f0f\u6d1e\u3002\u653b\u51fb\u8005\u5229\u7528\u6f0f\u6d1e\u53ef\u5728\u8fd0\u884c\u53d7\u5f71\u54cd\u7684\u5e94\u7528\u7a0b\u5e8f\u7684\u7528\u6237\u4e0a\u4e0b\u6587\u4e2d\u6267\u884c\u4efb\u610f\u4ee3\u7801\uff0c\u5bfc\u81f4\u62d2\u7edd\u670d\u52a1\u6761\u4ef6\u3002",
  "discovererName": "Chris Evans",
  "formalWay": "\u5382\u5546\u5c1a\u672a\u63d0\u4f9b\u6f0f\u6d1e\u4fee\u590d\u65b9\u6848\uff0c\u8bf7\u5173\u6ce8\u5382\u5546\u4e3b\u9875\u66f4\u65b0\uff1a\r\nhttps://gstreamer.freedesktop.org/modules/gst-plugins-good.html",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2016-11620",
  "openTime": "2016-11-29",
  "products": {
    "product": [
      "Ubuntu Ubuntu Linux 12.04 LTS amd64",
      "Ubuntu Ubuntu Linux 12.04 LTS i386",
      "Ubuntu Ubuntu Linux 16.04 LTS",
      "GStreamer GStreamer Good Plug-ins",
      "debian Debian Linux 6.0 sparc",
      "debian Debian Linux 6.0 s/390",
      "debian Debian Linux 6.0 powerpc",
      "debian Debian Linux 6.0 mips",
      "debian Debian Linux 6.0 ia-64",
      "debian Debian Linux 6.0 ia-32",
      "debian Debian Linux 6.0 arm",
      "debian Debian Linux 6.0 amd64",
      "Ubuntu Ubuntu Linux 16.10",
      "Ubuntu Ubuntu Linux 14.04 LTS",
      "Ubuntu Ubuntu Linux 12.04 LTS"
    ]
  },
  "referenceLink": "http://www.securityfocus.com/bid/94499",
  "serverity": "\u4e2d",
  "submitTime": "2016-11-28",
  "title": "GStreamer Good Plug-ins skip count\u7f13\u51b2\u533a\u6ea2\u51fa\u6f0f\u6d1e"
}

FKIE_CVE-2016-9635

Vulnerability from fkie_nvd - Published: 2017-01-27 22:59 - Updated: 2026-06-17 00:56

Severity

9.8 (Critical) - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Summary

References

URL	Tags
cve@mitre.org	http://rhn.redhat.com/errata/RHSA-2016-2975.html	Third Party Advisory
cve@mitre.org	http://rhn.redhat.com/errata/RHSA-2017-0019.html
cve@mitre.org	http://rhn.redhat.com/errata/RHSA-2017-0020.html
cve@mitre.org	http://www.debian.org/security/2016/dsa-3723	Third Party Advisory
cve@mitre.org	http://www.debian.org/security/2016/dsa-3724	Third Party Advisory
cve@mitre.org	http://www.openwall.com/lists/oss-security/2016/11/24/2	Mailing List, Third Party Advisory
cve@mitre.org	http://www.securityfocus.com/bid/94499	Third Party Advisory, VDB Entry
cve@mitre.org	https://bugzilla.gnome.org/show_bug.cgi?id=774834	Issue Tracking
cve@mitre.org	https://gstreamer.freedesktop.org/releases/1.10/#1.10.2	Release Notes, Vendor Advisory
cve@mitre.org	https://scarybeastsecurity.blogspot.com/2016/11/0day-exploit-advancing-exploitation.html	Exploit, Technical Description
cve@mitre.org	https://security.gentoo.org/glsa/201705-10
af854a3a-2127-422b-91ae-364da2661108	http://rhn.redhat.com/errata/RHSA-2016-2975.html	Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108	http://rhn.redhat.com/errata/RHSA-2017-0019.html
af854a3a-2127-422b-91ae-364da2661108	http://rhn.redhat.com/errata/RHSA-2017-0020.html
af854a3a-2127-422b-91ae-364da2661108	http://www.debian.org/security/2016/dsa-3723	Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108	http://www.debian.org/security/2016/dsa-3724	Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108	http://www.openwall.com/lists/oss-security/2016/11/24/2	Mailing List, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108	http://www.securityfocus.com/bid/94499	Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108	https://bugzilla.gnome.org/show_bug.cgi?id=774834	Issue Tracking
af854a3a-2127-422b-91ae-364da2661108	https://gstreamer.freedesktop.org/releases/1.10/#1.10.2	Release Notes, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	https://scarybeastsecurity.blogspot.com/2016/11/0day-exploit-advancing-exploitation.html	Exploit, Technical Description
af854a3a-2127-422b-91ae-364da2661108	https://security.gentoo.org/glsa/201705-10

Impacted products

Vendor	Product	Version
gstreamer	gstreamer	*
redhat	enterprise_linux_desktop	6.0
redhat	enterprise_linux_hpc_node	6.0
redhat	enterprise_linux_server	6.0
redhat	enterprise_linux_workstation	6.0
debian	debian_linux	8.0

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "source": "cve@mitre.org"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:gstreamer:gstreamer:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "E205DF55-52AD-46B7-B83E-2FDB322A52A2",
              "versionEndIncluding": "1.10.1",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_hpc_node:6.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "C2FAC325-6EEB-466D-9EBA-8ED4DBC9CFBF",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "9BBCD86A-E6C7-4444-9D74-F861084090F0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "E5ED5807-55B7-47C5-97A6-03233F4FBC3A",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Heap-based buffer overflow in the flx_decode_delta_fli function in gst/flx/gstflxdec.c in the FLIC decoder in GStreamer before 1.10.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) by providing a \u0027skip count\u0027 that goes beyond initialized buffer."
    },
    {
      "lang": "es",
      "value": "Desbordamiento de b\u00fafer basado en memoria din\u00e1mica en la funci\u00f3n flx_decode_delta_fli en gst/flx/gstflxdec.c en el decoder FLIC en GStreamer en versiones anteriores a 1.10.2 permite a atacantes remotos ejecutar c\u00f3digo arbitrario o provocar una denegaci\u00f3n de servicio (ca\u00edda de la aplicaci\u00f3n) proporcionando un \u0027recuento de saltos\u0027 que va m\u00e1s all\u00e1 del b\u00fafer inicializado."
    }
  ],
  "id": "CVE-2016-9635",
  "lastModified": "2026-06-17T00:56:21.753",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "HIGH",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 7.5,
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 10.0,
        "impactScore": 6.4,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV30": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "HIGH",
          "baseScore": 9.8,
          "baseSeverity": "CRITICAL",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "version": "3.0"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 5.9,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ]
  },
  "published": "2017-01-27T22:59:01.990",
  "references": [
    {
      "source": "cve@mitre.org",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "http://rhn.redhat.com/errata/RHSA-2016-2975.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://rhn.redhat.com/errata/RHSA-2017-0019.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://rhn.redhat.com/errata/RHSA-2017-0020.html"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "http://www.debian.org/security/2016/dsa-3723"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "http://www.debian.org/security/2016/dsa-3724"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Mailing List",
        "Third Party Advisory"
      ],
      "url": "http://www.openwall.com/lists/oss-security/2016/11/24/2"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://www.securityfocus.com/bid/94499"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Issue Tracking"
      ],
      "url": "https://bugzilla.gnome.org/show_bug.cgi?id=774834"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Release Notes",
        "Vendor Advisory"
      ],
      "url": "https://gstreamer.freedesktop.org/releases/1.10/#1.10.2"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Exploit",
        "Technical Description"
      ],
      "url": "https://scarybeastsecurity.blogspot.com/2016/11/0day-exploit-advancing-exploitation.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://security.gentoo.org/glsa/201705-10"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "http://rhn.redhat.com/errata/RHSA-2016-2975.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://rhn.redhat.com/errata/RHSA-2017-0019.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://rhn.redhat.com/errata/RHSA-2017-0020.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "http://www.debian.org/security/2016/dsa-3723"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "http://www.debian.org/security/2016/dsa-3724"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Mailing List",
        "Third Party Advisory"
      ],
      "url": "http://www.openwall.com/lists/oss-security/2016/11/24/2"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://www.securityfocus.com/bid/94499"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Issue Tracking"
      ],
      "url": "https://bugzilla.gnome.org/show_bug.cgi?id=774834"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Release Notes",
        "Vendor Advisory"
      ],
      "url": "https://gstreamer.freedesktop.org/releases/1.10/#1.10.2"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Exploit",
        "Technical Description"
      ],
      "url": "https://scarybeastsecurity.blogspot.com/2016/11/0day-exploit-advancing-exploitation.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://security.gentoo.org/glsa/201705-10"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-119"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

GHSA-R6QF-X4MQ-X26G

Vulnerability from github – Published: 2022-05-14 03:55 – Updated: 2022-05-14 03:55

Details

Severity

9.8 (Critical)


                  
                    CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2016-9635"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-119"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2017-01-27T22:59:00Z",
    "severity": "CRITICAL"
  },
  "details": "Heap-based buffer overflow in the flx_decode_delta_fli function in gst/flx/gstflxdec.c in the FLIC decoder in GStreamer before 1.10.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) by providing a \u0027skip count\u0027 that goes beyond initialized buffer.",
  "id": "GHSA-r6qf-x4mq-x26g",
  "modified": "2022-05-14T03:55:00Z",
  "published": "2022-05-14T03:55:00Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-9635"
    },
    {
      "type": "WEB",
      "url": "https://bugzilla.gnome.org/show_bug.cgi?id=774834"
    },
    {
      "type": "WEB",
      "url": "https://gstreamer.freedesktop.org/releases/1.10/#1.10.2"
    },
    {
      "type": "WEB",
      "url": "https://scarybeastsecurity.blogspot.com/2016/11/0day-exploit-advancing-exploitation.html"
    },
    {
      "type": "WEB",
      "url": "https://security.gentoo.org/glsa/201705-10"
    },
    {
      "type": "WEB",
      "url": "http://rhn.redhat.com/errata/RHSA-2016-2975.html"
    },
    {
      "type": "WEB",
      "url": "http://rhn.redhat.com/errata/RHSA-2017-0019.html"
    },
    {
      "type": "WEB",
      "url": "http://rhn.redhat.com/errata/RHSA-2017-0020.html"
    },
    {
      "type": "WEB",
      "url": "http://www.debian.org/security/2016/dsa-3723"
    },
    {
      "type": "WEB",
      "url": "http://www.debian.org/security/2016/dsa-3724"
    },
    {
      "type": "WEB",
      "url": "http://www.openwall.com/lists/oss-security/2016/11/24/2"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/bid/94499"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
      "type": "CVSS_V3"
    }
  ]
}

GSD-2016-9635

Vulnerability from gsd - Updated: 2023-12-13 01:21

Details

Aliases

CVE-2016-9635

Aliases

CVE-2016-9635

JSON

To clipboard

{
  "GSD": {
    "alias": "CVE-2016-9635",
    "description": "Heap-based buffer overflow in the flx_decode_delta_fli function in gst/flx/gstflxdec.c in the FLIC decoder in GStreamer before 1.10.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) by providing a \u0027skip count\u0027 that goes beyond initialized buffer.",
    "id": "GSD-2016-9635",
    "references": [
      "https://www.suse.com/security/cve/CVE-2016-9635.html",
      "https://www.debian.org/security/2016/dsa-3724",
      "https://www.debian.org/security/2016/dsa-3723",
      "https://access.redhat.com/errata/RHSA-2017:0020",
      "https://access.redhat.com/errata/RHSA-2017:0019",
      "https://access.redhat.com/errata/RHSA-2016:2975",
      "https://advisories.mageia.org/CVE-2016-9635.html",
      "https://linux.oracle.com/cve/CVE-2016-9635.html"
    ]
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2016-9635"
      ],
      "details": "Heap-based buffer overflow in the flx_decode_delta_fli function in gst/flx/gstflxdec.c in the FLIC decoder in GStreamer before 1.10.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) by providing a \u0027skip count\u0027 that goes beyond initialized buffer.",
      "id": "GSD-2016-9635",
      "modified": "2023-12-13T01:21:21.899213Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "cve@mitre.org",
        "ID": "CVE-2016-9635",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "n/a",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "n/a"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "n/a"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "Heap-based buffer overflow in the flx_decode_delta_fli function in gst/flx/gstflxdec.c in the FLIC decoder in GStreamer before 1.10.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) by providing a \u0027skip count\u0027 that goes beyond initialized buffer."
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "n/a"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "DSA-3724",
            "refsource": "DEBIAN",
            "url": "http://www.debian.org/security/2016/dsa-3724"
          },
          {
            "name": "RHSA-2017:0019",
            "refsource": "REDHAT",
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0019.html"
          },
          {
            "name": "RHSA-2016:2975",
            "refsource": "REDHAT",
            "url": "http://rhn.redhat.com/errata/RHSA-2016-2975.html"
          },
          {
            "name": "DSA-3723",
            "refsource": "DEBIAN",
            "url": "http://www.debian.org/security/2016/dsa-3723"
          },
          {
            "name": "RHSA-2017:0020",
            "refsource": "REDHAT",
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0020.html"
          },
          {
            "name": "94499",
            "refsource": "BID",
            "url": "http://www.securityfocus.com/bid/94499"
          },
          {
            "name": "https://gstreamer.freedesktop.org/releases/1.10/#1.10.2",
            "refsource": "CONFIRM",
            "url": "https://gstreamer.freedesktop.org/releases/1.10/#1.10.2"
          },
          {
            "name": "[oss-security] 20161123 Re: CVE Request: gstreamer plugins",
            "refsource": "MLIST",
            "url": "http://www.openwall.com/lists/oss-security/2016/11/24/2"
          },
          {
            "name": "https://bugzilla.gnome.org/show_bug.cgi?id=774834",
            "refsource": "CONFIRM",
            "url": "https://bugzilla.gnome.org/show_bug.cgi?id=774834"
          },
          {
            "name": "GLSA-201705-10",
            "refsource": "GENTOO",
            "url": "https://security.gentoo.org/glsa/201705-10"
          },
          {
            "name": "https://scarybeastsecurity.blogspot.com/2016/11/0day-exploit-advancing-exploitation.html",
            "refsource": "MISC",
            "url": "https://scarybeastsecurity.blogspot.com/2016/11/0day-exploit-advancing-exploitation.html"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:gstreamer:gstreamer:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndIncluding": "1.10.1",
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_hpc_node:6.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2016-9635"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "Heap-based buffer overflow in the flx_decode_delta_fli function in gst/flx/gstflxdec.c in the FLIC decoder in GStreamer before 1.10.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) by providing a \u0027skip count\u0027 that goes beyond initialized buffer."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "CWE-119"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://scarybeastsecurity.blogspot.com/2016/11/0day-exploit-advancing-exploitation.html",
              "refsource": "MISC",
              "tags": [
                "Exploit",
                "Technical Description"
              ],
              "url": "https://scarybeastsecurity.blogspot.com/2016/11/0day-exploit-advancing-exploitation.html"
            },
            {
              "name": "https://gstreamer.freedesktop.org/releases/1.10/#1.10.2",
              "refsource": "CONFIRM",
              "tags": [
                "Release Notes",
                "Vendor Advisory"
              ],
              "url": "https://gstreamer.freedesktop.org/releases/1.10/#1.10.2"
            },
            {
              "name": "https://bugzilla.gnome.org/show_bug.cgi?id=774834",
              "refsource": "CONFIRM",
              "tags": [
                "Issue Tracking"
              ],
              "url": "https://bugzilla.gnome.org/show_bug.cgi?id=774834"
            },
            {
              "name": "94499",
              "refsource": "BID",
              "tags": [
                "Third Party Advisory",
                "VDB Entry"
              ],
              "url": "http://www.securityfocus.com/bid/94499"
            },
            {
              "name": "[oss-security] 20161123 Re: CVE Request: gstreamer plugins",
              "refsource": "MLIST",
              "tags": [
                "Mailing List",
                "Third Party Advisory"
              ],
              "url": "http://www.openwall.com/lists/oss-security/2016/11/24/2"
            },
            {
              "name": "DSA-3724",
              "refsource": "DEBIAN",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "http://www.debian.org/security/2016/dsa-3724"
            },
            {
              "name": "DSA-3723",
              "refsource": "DEBIAN",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "http://www.debian.org/security/2016/dsa-3723"
            },
            {
              "name": "RHSA-2016:2975",
              "refsource": "REDHAT",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "http://rhn.redhat.com/errata/RHSA-2016-2975.html"
            },
            {
              "name": "GLSA-201705-10",
              "refsource": "GENTOO",
              "tags": [],
              "url": "https://security.gentoo.org/glsa/201705-10"
            },
            {
              "name": "RHSA-2017:0020",
              "refsource": "REDHAT",
              "tags": [],
              "url": "http://rhn.redhat.com/errata/RHSA-2017-0020.html"
            },
            {
              "name": "RHSA-2017:0019",
              "refsource": "REDHAT",
              "tags": [],
              "url": "http://rhn.redhat.com/errata/RHSA-2017-0019.html"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV2": {
          "cvssV2": {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 7.5,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "exploitabilityScore": 10.0,
          "impactScore": 6.4,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": false,
          "obtainUserPrivilege": false,
          "severity": "HIGH",
          "userInteractionRequired": false
        },
        "baseMetricV3": {
          "cvssV3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "exploitabilityScore": 3.9,
          "impactScore": 5.9
        }
      },
      "lastModifiedDate": "2018-01-05T02:31Z",
      "publishedDate": "2017-01-27T22:59Z"
    }
  }
}

RHSA-2016:2975

Vulnerability from csaf_redhat - Published: 2016-12-21 12:33 - Updated: 2026-07-31 14:36

Summary

Red Hat Security Advisory: gstreamer-plugins-good security update

Severity

Important

Scope

5 vulnerabilities in this advisory, including CVE-2016-9635.

CVE-2016-9635

Multiple flaws were discovered in GStreamer's FLC/FLI/FLX media file format decoding plug-in. A remote attacker could use these flaws to cause an application using GStreamer to crash or, potentially, execute arbitrary code with the privileges of the user running the application.

7.5 (High)


                
                  CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Fixed: 50 products

https://access.redhat.com/errata/RHSA-2016:2975

Open the full advisory

RHSA-2016_2975

Vulnerability from csaf_redhat - Published: 2016-12-21 12:33 - Updated: 2024-11-22 10:34

Summary

Red Hat Security Advisory: gstreamer-plugins-good security update

Severity

Important

Scope

5 vulnerabilities in this advisory, including CVE-2016-9635.

CVE-2016-9635

7.5 (High)


                
                  CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Fixed: 133 products

https://access.redhat.com/errata/RHSA-2016:2975

Open the full advisory

RHSA-2017_0019

Vulnerability from csaf_redhat - Published: 2017-01-05 09:35 - Updated: 2024-11-22 10:35

Summary

Red Hat Security Advisory: gstreamer-plugins-good security update

Severity

Moderate

Scope

5 vulnerabilities in this advisory, including CVE-2016-9635.

CVE-2016-9635

7.5 (High)


                
                  CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Fixed: 144 products

https://access.redhat.com/errata/RHSA-2017:0019

Open the full advisory

RHSA-2017:0019

Vulnerability from csaf_opensuse - Published: 2017-01-05 00:00 - Updated: 2026-09-20 10:58

Summary

security update for gstreamer-plugins-good

Severity

Moderate

Scope

5 vulnerabilities in this advisory, including CVE-2016-9635.

CVE-2016-9635

9.8 (Critical)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Recommended: 3 products

Open the full advisory

RHSA-2017:0020

Vulnerability from csaf_opensuse - Published: 2017-01-05 00:00 - Updated: 2026-09-20 10:58

Summary

security update for gstreamer1-plugins-good

Severity

Moderate

Scope

5 vulnerabilities in this advisory, including CVE-2016-9635.

CVE-2016-9635

9.8 (Critical)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Recommended: 2 products

Open the full advisory

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

Order JSON

Publication & reservation Sightings KEV catalogs Other timestamps

Loading timeline…

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CVE-2016-9635 (GCVE-0-2016-9635)

CLEANSTART-2026-LU26408 (CVE-2016-9635)

Tags

Sightings

Nomenclature

Vulnerability timeline

Related by attack behaviour