Ubuntu 18.04 LTS: USN-3958-1 Moderate: GStreamer Base Plugins Crash

ubuntu

April 29, 2019

GStreamer Base Plugins could be made to crash or run programs if it received specially crafted network traffic.

Summary

GStreamer Base Plugins could be made to crash or run programs if it

received specially crafted network traffic.

Software Description:

- gst-plugins-base1.0: GStreamer plugins

- gst-plugins-base0.10: GStreamer plugins

Details:

It was discovered that GStreamer Base Plugins did not correctly handle

certain malformed RTSP streams. If a user were tricked into opening a

crafted RTSP stream with a GStreamer application, an attacker could cause a

denial of service via application crash, or possibly execute arbitrary

code.

Topics Covered

security advisory denial of service code execution ubuntu gstreamer

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 18.10:
  gstreamer1.0-plugins-base       1.14.4-1ubuntu1.1

Ubuntu 18.04 LTS:
  gstreamer1.0-plugins-base       1.14.1-1ubuntu1~ubuntu18.04.2

Ubuntu 16.04 LTS:
  gstreamer0.10-plugins-base      0.10.36-2ubuntu0.2
  gstreamer1.0-plugins-base       1.8.3-1ubuntu0.3

In general, a standard system update will make all the necessary changes.