USN-8778-1: GStreamer Good Plugins vulnerability

Ubuntu issued USN-8778-1 fixing a GStreamer Good Plugins flaw that lets remote attackers cause resource exhaustion and denial of service via fragmented RTP packets.

Ubuntu Security Notice USN-8778-1 addresses a flaw in GStreamer Good Plugins, which failed to limit the size of reassembly buffers when processing fragmented RTP packets. A remote attacker could exploit this to make GStreamer consume excessive resources, resulting in a denial of service. The notice provides patched packages for supported Ubuntu releases; no CVE id is listed in the text and no exploitation is reported.

• GStreamer Good Plugins did not limit reassembly buffer size for fragmented RTP packets.
• Remote attacker could trigger excessive resource consumption and denial of service.
• Ubuntu has released patched packages via USN-8778-1.