Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
amazonAmazonALAS2-2023-2121
HistoryJul 17, 2023 - 5:39 p.m.

Important: gstreamer-plugins-base

2023-07-1717:39:00
alas.aws.amazon.com
6
gstreamer-plugins-base
integer overflow
flac
amazon linux 2
update
cve-2023-37327

7.6 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H

6.5 Medium

AI Score

Confidence

Low

0.0005 Low

EPSS

Percentile

16.3%

JSON

Issue Overview:

Integer overflow leading to heap overwrite in FLAC image tag handling (CVE-2023-37327)

Affected Packages:

gstreamer-plugins-base

Note:

This advisory is applicable to Amazon Linux 2 (AL2) Core repository. Visit this FAQ section for the difference between AL2 Core and AL2 Extras advisories.

Issue Correction:
Run yum update gstreamer-plugins-base to update your system.

New Packages:

aarch64:  
    gstreamer-plugins-base-0.10.36-18.amzn2.0.1.aarch64  
    gstreamer-plugins-base-debuginfo-0.10.36-18.amzn2.0.1.aarch64  
    gstreamer-plugins-base-tools-0.10.36-18.amzn2.0.1.aarch64  
    gstreamer-plugins-base-devel-0.10.36-18.amzn2.0.1.aarch64  
  
i686:  
    gstreamer-plugins-base-0.10.36-18.amzn2.0.1.i686  
    gstreamer-plugins-base-debuginfo-0.10.36-18.amzn2.0.1.i686  
    gstreamer-plugins-base-tools-0.10.36-18.amzn2.0.1.i686  
    gstreamer-plugins-base-devel-0.10.36-18.amzn2.0.1.i686  
  
noarch:  
    gstreamer-plugins-base-devel-docs-0.10.36-18.amzn2.0.1.noarch  
  
src:  
    gstreamer-plugins-base-0.10.36-18.amzn2.0.1.src  
  
x86_64:  
    gstreamer-plugins-base-0.10.36-18.amzn2.0.1.x86_64  
    gstreamer-plugins-base-debuginfo-0.10.36-18.amzn2.0.1.x86_64  
    gstreamer-plugins-base-tools-0.10.36-18.amzn2.0.1.x86_64  
    gstreamer-plugins-base-devel-0.10.36-18.amzn2.0.1.x86_64

Additional References

Red Hat: CVE-2023-37327

Mitre: CVE-2023-37327

OSVersionArchitecturePackageVersionFilename
Amazon Linux2aarch64gstreamer-plugins-base< 0.10.36-18.amzn2.0.1gstreamer-plugins-base-0.10.36-18.amzn2.0.1.aarch64.rpm
Amazon Linux2aarch64gstreamer-plugins-base-debuginfo< 0.10.36-18.amzn2.0.1gstreamer-plugins-base-debuginfo-0.10.36-18.amzn2.0.1.aarch64.rpm
Amazon Linux2aarch64gstreamer-plugins-base-tools< 0.10.36-18.amzn2.0.1gstreamer-plugins-base-tools-0.10.36-18.amzn2.0.1.aarch64.rpm
Amazon Linux2aarch64gstreamer-plugins-base-devel< 0.10.36-18.amzn2.0.1gstreamer-plugins-base-devel-0.10.36-18.amzn2.0.1.aarch64.rpm
Amazon Linux2i686gstreamer-plugins-base< 0.10.36-18.amzn2.0.1gstreamer-plugins-base-0.10.36-18.amzn2.0.1.i686.rpm
Amazon Linux2i686gstreamer-plugins-base-debuginfo< 0.10.36-18.amzn2.0.1gstreamer-plugins-base-debuginfo-0.10.36-18.amzn2.0.1.i686.rpm
Amazon Linux2i686gstreamer-plugins-base-tools< 0.10.36-18.amzn2.0.1gstreamer-plugins-base-tools-0.10.36-18.amzn2.0.1.i686.rpm
Amazon Linux2i686gstreamer-plugins-base-devel< 0.10.36-18.amzn2.0.1gstreamer-plugins-base-devel-0.10.36-18.amzn2.0.1.i686.rpm
Amazon Linux2noarchgstreamer-plugins-base-devel-docs< 0.10.36-18.amzn2.0.1gstreamer-plugins-base-devel-docs-0.10.36-18.amzn2.0.1.noarch.rpm
Amazon Linux2x86_64gstreamer-plugins-base< 0.10.36-18.amzn2.0.1gstreamer-plugins-base-0.10.36-18.amzn2.0.1.x86_64.rpm
Rows per page:
1-10 of 131

Related

nessus 27
osv 7
debian 1
openvas 22
redhat 2
oraclelinux 2
debiancve 1
zdi 1
amazon 3
cvelist 1
almalinux 2
vulnrichment 1
ubuntucve 1
ubuntu 2
nvd 1
rocky 1
cve 1
alpinelinux 1
redhatcve 1
fedora 4
mageia 1
hp 2
nessus
nessus
Amazon Linux 2 : gstreamer-plugins-base (ALAS-2023-2121)
2023-07-20 00:00:00
Amazon Linux 2 : gstreamer1-plugins-base (ALAS-2023-2154)
2023-07-26 00:00:00
Debian DLA-3505-1 : gst-plugins-good1.0 - LTS security update
2023-07-26 00:00:00
osv
osv
gst-plugins-good1.0 - security update
2023-07-02 00:00:00
gst-plugins-good1.0 vulnerability
2023-08-02 16:23:42
Moderate: gstreamer1-plugins-good security update
2024-04-30 00:00:00
debian
debian
[SECURITY] [DLA 3505-1] gst-plugins-good1.0 security update
2023-07-25 17:12:19
openvas
openvas
openSUSE: Security Advisory for gstreamer (SUSE-SU-2023:3219-1)
2024-03-04 00:00:00
SUSE: Security Advisory (SUSE-SU-2023:3266-1)
2023-08-11 00:00:00
Ubuntu: Security Advisory (USN-6269-1)
2023-08-03 00:00:00
redhat
redhat
(RHSA-2024:3089) Moderate: gstreamer1-plugins-good security update
2024-05-22 06:35:34
(RHSA-2024:2303) Moderate: gstreamer1-plugins-good security update
2024-04-30 06:15:19
oraclelinux
oraclelinux
gstreamer1-plugins-good security update
2024-05-23 00:00:00
gstreamer1-plugins-good security update
2024-05-02 00:00:00
debiancve
debiancve
CVE-2023-37327
2024-05-03 02:15:43
zdi
zdi
GStreamer FLAC File Parsing Integer Overflow Remote Code Execution Vulnerability
2023-07-06 00:00:00
amazon
amazon
Important: gstreamer-plugins-good
2023-07-17 17:39:00
Important: gstreamer1-plugins-base
2023-07-20 17:28:00
Important: gstreamer1-plugins-good
2023-07-20 17:28:00
cvelist
cvelist
CVE-2023-37327 GStreamer FLAC File Parsing Integer Overflow Remote Code Execution Vulnerability
2024-05-03 01:58:19
almalinux
almalinux
Moderate: gstreamer1-plugins-good security update
2024-05-22 00:00:00
Moderate: gstreamer1-plugins-good security update
2024-04-30 00:00:00
vulnrichment
vulnrichment
CVE-2023-37327 GStreamer FLAC File Parsing Integer Overflow Remote Code Execution Vulnerability
2024-05-03 01:58:19
ubuntucve
ubuntucve
CVE-2023-37327
2023-07-31 00:00:00
ubuntu
ubuntu
GStreamer Good Plugins vulnerability
2023-08-02 00:00:00
GStreamer Base Plugins vulnerabilities
2023-08-02 00:00:00
nvd
nvd
CVE-2023-37327
2024-05-03 02:15:43
rocky
rocky
gstreamer1-plugins-good security update
2024-06-14 13:59:30
cve
cve
CVE-2023-37327
2024-05-03 02:15:43
alpinelinux
alpinelinux
CVE-2023-37327
2024-05-03 02:15:43
redhatcve
redhatcve
CVE-2023-37327
2023-12-14 12:27:39
fedora
fedora
[SECURITY] Fedora 38 Update: mingw-gstreamer1-plugins-base-1.22.7-1.fc38
2023-12-25 03:37:40
[SECURITY] Fedora 38 Update: mingw-gstreamer1-plugins-bad-free-1.22.7-1.fc38
2023-12-25 03:37:39
[SECURITY] Fedora 38 Update: mingw-gstreamer1-plugins-good-1.22.7-1.fc38
2023-12-25 03:37:40
mageia
mageia
Updated gstreamer packages fix many security vulnerabilities
2023-12-22 14:04:51
hp
hp
HP ThinPro 8.1 SP 2 Security Updates
2024-04-12 00:00:00
HP ThinPro 8.0 SP 8 Security Updates
2024-03-01 00:00:00

7.6 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H

6.5 Medium

AI Score

Confidence

Low

0.0005 Low

EPSS

Percentile

16.3%

JSON
Related for ALAS2-2023-2121
nessus27osv7debian1openvas22redhat2oraclelinux2debiancve1zdi1amazon3cvelist1almalinux2vulnrichment1ubuntucve1ubuntu2nvd1rocky1cve1alpinelinux1redhatcve1fedora4mageia1hp2