{"id": "CVE-2017-5839", "bulletinFamily": "NVD", "title": "CVE-2017-5839", "description": "The gst_riff_create_audio_caps function in gst-libs/gst/riff/riff-media.c in gst-plugins-base in GStreamer before 1.10.3 does not properly limit recursion, which allows remote attackers to cause a denial of service (stack overflow and crash) via vectors involving nested WAVEFORMATEX.", "published": "2017-02-09T15:59:00", "modified": "2019-10-03T00:03:00", "cvss": {"score": 5.0, "vector": "AV:N/AC:L/Au:N/C:N/I:N/A:P"}, "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-5839", "reporter": "cve@mitre.org", "references": ["https://bugzilla.gnome.org/show_bug.cgi?id=777265", "http://www.openwall.com/lists/oss-security/2017/02/02/9", "http://www.securityfocus.com/bid/96001", "https://access.redhat.com/errata/RHSA-2017:2060", "http://www.openwall.com/lists/oss-security/2017/02/01/7", "https://gstreamer.freedesktop.org/releases/1.10/#1.10.3", "https://security.gentoo.org/glsa/201705-10", "http://www.debian.org/security/2017/dsa-3819"], "cvelist": ["CVE-2017-5839"], "type": "cve", "lastseen": "2020-12-09T20:13:34", "edition": 6, "viewCount": 9, "enchantments": {"dependencies": {"references": [{"type": "nessus", "idList": ["CENTOS_RHSA-2017-2060.NASL", "REDHAT-RHSA-2017-2060.NASL", "OPENSUSE-2017-301.NASL", "OPENSUSE-2017-512.NASL", "UBUNTU_USN-3244-1.NASL", "SUSE_SU-2017-1041-1.NASL", "FEDORA_2017-A56D78ACB8.NASL", "DEBIAN_DSA-3819.NASL", "SL_20170802_GSTREAMER_ON_SL7_X.NASL", "SUSE_SU-2017-1039-1.NASL"]}, {"type": "archlinux", "idList": ["ASA-201702-4"]}, {"type": "openvas", "idList": ["OPENVAS:1361412562310843111", "OPENVAS:1361412562311220171206", "OPENVAS:1361412562310871858", "OPENVAS:1361412562310872389", "OPENVAS:1361412562311220171205", "OPENVAS:1361412562310703819", "OPENVAS:703819"]}, {"type": "fedora", "idList": ["FEDORA:3C8E1632A54A"]}, {"type": "ubuntu", "idList": ["USN-3244-1"]}, {"type": "debian", "idList": ["DEBIAN:DSA-3819-1:A47BA"]}, {"type": "oraclelinux", "idList": ["ELSA-2017-2060"]}, {"type": "redhat", "idList": ["RHSA-2017:2060"]}, {"type": "centos", "idList": ["CESA-2017:2060"]}, {"type": "gentoo", "idList": ["GLSA-201705-10"]}], "modified": "2020-12-09T20:13:34", "rev": 2}, "score": {"value": 5.4, "vector": "NONE", "modified": "2020-12-09T20:13:34", "rev": 2}, "vulnersScore": 5.4}, "cpe": ["cpe:/a:gstreamer_project:gstreamer:1.10.2"], "affectedSoftware": [{"cpeName": "gstreamer_project:gstreamer", "name": "gstreamer project gstreamer", "operator": "le", "version": "1.10.2"}], "cvss2": {"cvssV2": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 5.0, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "severity": "MEDIUM", "userInteractionRequired": false}, "cvss3": {"cvssV3": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.0"}, "exploitabilityScore": 3.9, "impactScore": 3.6}, "cpe23": ["cpe:2.3:a:gstreamer_project:gstreamer:1.10.2:*:*:*:*:*:*:*"], "cwe": ["CWE-674"], "scheme": null, "cpeConfiguration": {"CVE_data_version": "4.0", "nodes": [{"cpe_match": [{"cpe23Uri": "cpe:2.3:a:gstreamer_project:gstreamer:1.10.2:*:*:*:*:*:*:*", "versionEndIncluding": "1.10.2", "vulnerable": true}], "operator": "OR"}]}}

{"nessus": [{"lastseen": "2021-01-07T14:25:40", "description": "This update for gstreamer-plugins-base fixes the following security\nissues :\n\n - A crafted AVI file could have caused a floating point\n exception leading to DoS (bsc#1024076, CVE-2017-5837,\n bsc#1024079, CVE-2017-5844)\n\n - A crafted AVI file could have caused a stack overflow\n leading to DoS (bsc#1024047, CVE-2017-5839)\n\n - A crafted SAMI subtitle file could have caused an\n invalid memory access possibly leading to DoS or\n corruption (bsc#1024041, CVE-2017-5842)\n\nNote that Tenable Network Security has extracted the preceding\ndescription block directly from the SUSE security advisory. Tenable\nhas attempted to automatically clean and format it as much as possible\nwithout introducing additional issues.", "edition": 27, "cvss3": {"score": 7.5, "vector": "AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}, "published": "2017-04-19T00:00:00", "title": "SUSE SLED12 / SLES12 Security Update : gstreamer-plugins-base (SUSE-SU-2017:1041-1)", "type": "nessus", "bulletinFamily": "scanner", "cvelist": ["CVE-2017-5844", "CVE-2017-5837", "CVE-2017-5839", "CVE-2017-5842"], "modified": "2017-04-19T00:00:00", "cpe": ["p-cpe:/a:novell:suse_linux:libgstrtp-1_0", "p-cpe:/a:novell:suse_linux:libgstapp-1_0-0", "p-cpe:/a:novell:suse_linux:libgstaudio-1_0-0", "cpe:/o:novell:suse_linux:12", "p-cpe:/a:novell:suse_linux:gstreamer-plugins-base-debuginfo", "p-cpe:/a:novell:suse_linux:libgsttag-1_0-0", "p-cpe:/a:novell:suse_linux:typelib-1_0-GstPbutils", "p-cpe:/a:novell:suse_linux:libgstsdp-1_0", "p-cpe:/a:novell:suse_linux:libgstallocators-1_0-0-debuginfo", "p-cpe:/a:novell:suse_linux:libgsttag-1_0-0-debuginfo", "p-cpe:/a:novell:suse_linux:libgsttag-1_0", "p-cpe:/a:novell:suse_linux:libgstfft-1_0-0", "p-cpe:/a:novell:suse_linux:libgstallocators-1_0", "p-cpe:/a:novell:suse_linux:libgstriff-1_0-0-debuginfo", "p-cpe:/a:novell:suse_linux:libgstrtsp-1_0-0-debuginfo", "p-cpe:/a:novell:suse_linux:libgstapp-1_0", "p-cpe:/a:novell:suse_linux:typelib-1_0-GstVideo", "p-cpe:/a:novell:suse_linux:libgstaudio-1_0-0-debuginfo", "p-cpe:/a:novell:suse_linux:libgstsdp-1_0-0-debuginfo", "p-cpe:/a:novell:suse_linux:libgstpbutils-1_0-0", "p-cpe:/a:novell:suse_linux:libgstrtp-1_0-0-debuginfo", "p-cpe:/a:novell:suse_linux:libgstvideo-1_0", "p-cpe:/a:novell:suse_linux:libgstrtsp-1_0", "p-cpe:/a:novell:suse_linux:gstreamer-plugins-base", "p-cpe:/a:novell:suse_linux:libgstpbutils-1_0-0-debuginfo", "p-cpe:/a:novell:suse_linux:libgstapp-1_0-0-debuginfo", "p-cpe:/a:novell:suse_linux:gstreamer-plugins-base-debugsource", "p-cpe:/a:novell:suse_linux:typelib-1_0-GstAudio", "p-cpe:/a:novell:suse_linux:libgstfft-1_0-0-debuginfo", "p-cpe:/a:novell:suse_linux:libgstvideo-1_0-0", "p-cpe:/a:novell:suse_linux:libgstpbutils-1_0", "p-cpe:/a:novell:suse_linux:libgstriff-1_0", "p-cpe:/a:novell:suse_linux:libgstvideo-1_0-0-debuginfo", "p-cpe:/a:novell:suse_linux:libgstfft-1_0", "p-cpe:/a:novell:suse_linux:libgstaudio-1_0", "p-cpe:/a:novell:suse_linux:typelib-1_0-GstTag"], "id": "SUSE_SU-2017-1041-1.NASL", "href": "https://www.tenable.com/plugins/nessus/99463", "sourceData": "#%NASL_MIN_LEVEL 70300\n#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were\n# extracted from SUSE update advisory SUSE-SU-2017:1041-1.\n# The text itself is copyright (C) SUSE.\n#\n\ninclude('deprecated_nasl_level.inc');\ninclude('compat.inc');\n\nif (description)\n{\n script_id(99463);\n script_version(\"3.7\");\n script_set_attribute(attribute:\"plugin_modification_date\", value:\"2021/01/06\");\n\n script_cve_id(\"CVE-2017-5837\", \"CVE-2017-5839\", \"CVE-2017-5842\", \"CVE-2017-5844\");\n\n script_name(english:\"SUSE SLED12 / SLES12 Security Update : gstreamer-plugins-base (SUSE-SU-2017:1041-1)\");\n script_summary(english:\"Checks rpm output for the updated packages.\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote SUSE host is missing one or more security updates.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"This update for gstreamer-plugins-base fixes the following security\nissues :\n\n - A crafted AVI file could have caused a floating point\n exception leading to DoS (bsc#1024076, CVE-2017-5837,\n bsc#1024079, CVE-2017-5844)\n\n - A crafted AVI file could have caused a stack overflow\n leading to DoS (bsc#1024047, CVE-2017-5839)\n\n - A crafted SAMI subtitle file could have caused an\n invalid memory access possibly leading to DoS or\n corruption (bsc#1024041, CVE-2017-5842)\n\nNote that Tenable Network Security has extracted the preceding\ndescription block directly from the SUSE security advisory. Tenable\nhas attempted to automatically clean and format it as much as possible\nwithout introducing additional issues.\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1024041\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1024047\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1024076\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1024079\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2017-5837/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2017-5839/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2017-5842/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2017-5844/\"\n );\n # https://www.suse.com/support/update/announcement/2017/suse-su-20171041-1/\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://www.nessus.org/u?96ac9e0d\"\n );\n script_set_attribute(\n attribute:\"solution\", \n value:\n\"To install this SUSE Security Update use YaST online_update.\nAlternatively you can run the command listed for your product :\n\nSUSE Linux Enterprise Workstation Extension 12-SP1:zypper in -t patch\nSUSE-SLE-WE-12-SP1-2017-606=1\n\nSUSE Linux Enterprise Software Development Kit 12-SP2:zypper in -t\npatch SUSE-SLE-SDK-12-SP2-2017-606=1\n\nSUSE Linux Enterprise Software Development Kit 12-SP1:zypper in -t\npatch SUSE-SLE-SDK-12-SP1-2017-606=1\n\nSUSE Linux Enterprise Server 12-SP1:zypper in -t patch\nSUSE-SLE-SERVER-12-SP1-2017-606=1\n\nSUSE Linux Enterprise Desktop 12-SP1:zypper in -t patch\nSUSE-SLE-DESKTOP-12-SP1-2017-606=1\n\nTo bring your system up-to-date, use 'zypper patch'.\"\n );\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P\");\n script_set_cvss_temporal_vector(\"CVSS2#E:U/RL:OF/RC:C\");\n script_set_cvss3_base_vector(\"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\");\n script_set_cvss3_temporal_vector(\"CVSS:3.0/E:U/RL:O/RC:C\");\n script_set_attribute(attribute:\"exploitability_ease\", value:\"No known exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"false\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:gstreamer-plugins-base\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:gstreamer-plugins-base-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:gstreamer-plugins-base-debugsource\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:libgstallocators-1_0\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:libgstallocators-1_0-0-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:libgstapp-1_0\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:libgstapp-1_0-0\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:libgstapp-1_0-0-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:libgstaudio-1_0\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:libgstaudio-1_0-0\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:libgstaudio-1_0-0-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:libgstfft-1_0\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:libgstfft-1_0-0\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:libgstfft-1_0-0-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:libgstpbutils-1_0\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:libgstpbutils-1_0-0\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:libgstpbutils-1_0-0-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:libgstriff-1_0\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:libgstriff-1_0-0-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:libgstrtp-1_0\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:libgstrtp-1_0-0-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:libgstrtsp-1_0\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:libgstrtsp-1_0-0-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:libgstsdp-1_0\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:libgstsdp-1_0-0-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:libgsttag-1_0\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:libgsttag-1_0-0\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:libgsttag-1_0-0-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:libgstvideo-1_0\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:libgstvideo-1_0-0\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:libgstvideo-1_0-0-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:typelib-1_0-GstAudio\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:typelib-1_0-GstPbutils\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:typelib-1_0-GstTag\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:typelib-1_0-GstVideo\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:novell:suse_linux:12\");\n\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2017/02/09\");\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2017/04/18\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2017/04/19\");\n script_set_attribute(attribute:\"generated_plugin\", value:\"current\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2017-2021 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n script_family(english:\"SuSE Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/cpu\", \"Host/SuSE/release\", \"Host/SuSE/rpm-list\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"rpm.inc\");\n\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nrelease = get_kb_item(\"Host/SuSE/release\");\nif (isnull(release) || release !~ \"^(SLED|SLES)\") audit(AUDIT_OS_NOT, \"SUSE\");\nos_ver = pregmatch(pattern: \"^(SLE(S|D)\\d+)\", string:release);\nif (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, \"SUSE\");\nos_ver = os_ver[1];\nif (! preg(pattern:\"^(SLED12|SLES12)$\", string:os_ver)) audit(AUDIT_OS_NOT, \"SUSE SLED12 / SLES12\", \"SUSE \" + os_ver);\n\nif (!get_kb_item(\"Host/SuSE/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (cpu !~ \"^i[3-6]86$\" && \"x86_64\" >!< cpu && \"s390x\" >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"SUSE \" + os_ver, cpu);\n\nsp = get_kb_item(\"Host/SuSE/patchlevel\");\nif (isnull(sp)) sp = \"0\";\nif (os_ver == \"SLES12\" && (! preg(pattern:\"^(1)$\", string:sp))) audit(AUDIT_OS_NOT, \"SLES12 SP1\", os_ver + \" SP\" + sp);\nif (os_ver == \"SLED12\" && (! preg(pattern:\"^(1)$\", string:sp))) audit(AUDIT_OS_NOT, \"SLED12 SP1\", os_ver + \" SP\" + sp);\n\n\nflag = 0;\nif (rpm_check(release:\"SLES12\", sp:\"1\", reference:\"gstreamer-plugins-base-1.2.4-2.6.8\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"1\", reference:\"gstreamer-plugins-base-debuginfo-1.2.4-2.6.8\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"1\", reference:\"gstreamer-plugins-base-debugsource-1.2.4-2.6.8\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"1\", reference:\"libgstallocators-1_0-0-1.2.4-2.6.8\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"1\", reference:\"libgstallocators-1_0-0-debuginfo-1.2.4-2.6.8\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"1\", reference:\"libgstapp-1_0-0-1.2.4-2.6.8\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"1\", reference:\"libgstapp-1_0-0-debuginfo-1.2.4-2.6.8\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"1\", reference:\"libgstaudio-1_0-0-1.2.4-2.6.8\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"1\", reference:\"libgstaudio-1_0-0-debuginfo-1.2.4-2.6.8\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"1\", reference:\"libgstfft-1_0-0-1.2.4-2.6.8\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"1\", reference:\"libgstfft-1_0-0-debuginfo-1.2.4-2.6.8\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"1\", reference:\"libgstpbutils-1_0-0-1.2.4-2.6.8\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"1\", reference:\"libgstpbutils-1_0-0-debuginfo-1.2.4-2.6.8\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"1\", reference:\"libgstriff-1_0-0-1.2.4-2.6.8\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"1\", reference:\"libgstriff-1_0-0-debuginfo-1.2.4-2.6.8\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"1\", reference:\"libgstrtp-1_0-0-1.2.4-2.6.8\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"1\", reference:\"libgstrtp-1_0-0-debuginfo-1.2.4-2.6.8\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"1\", reference:\"libgstrtsp-1_0-0-1.2.4-2.6.8\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"1\", reference:\"libgstrtsp-1_0-0-debuginfo-1.2.4-2.6.8\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"1\", reference:\"libgstsdp-1_0-0-1.2.4-2.6.8\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"1\", reference:\"libgstsdp-1_0-0-debuginfo-1.2.4-2.6.8\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"1\", reference:\"libgsttag-1_0-0-1.2.4-2.6.8\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"1\", reference:\"libgsttag-1_0-0-debuginfo-1.2.4-2.6.8\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"1\", reference:\"libgstvideo-1_0-0-1.2.4-2.6.8\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"1\", reference:\"libgstvideo-1_0-0-debuginfo-1.2.4-2.6.8\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"1\", reference:\"gstreamer-plugins-base-debuginfo-32bit-1.2.4-2.6.8\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"1\", reference:\"libgstapp-1_0-0-32bit-1.2.4-2.6.8\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"1\", reference:\"libgstapp-1_0-0-debuginfo-32bit-1.2.4-2.6.8\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"1\", reference:\"libgstaudio-1_0-0-32bit-1.2.4-2.6.8\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"1\", reference:\"libgstaudio-1_0-0-debuginfo-32bit-1.2.4-2.6.8\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"1\", reference:\"libgstpbutils-1_0-0-32bit-1.2.4-2.6.8\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"1\", reference:\"libgstpbutils-1_0-0-debuginfo-32bit-1.2.4-2.6.8\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"1\", reference:\"libgsttag-1_0-0-32bit-1.2.4-2.6.8\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"1\", reference:\"libgsttag-1_0-0-debuginfo-32bit-1.2.4-2.6.8\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"1\", reference:\"libgstvideo-1_0-0-32bit-1.2.4-2.6.8\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"1\", reference:\"libgstvideo-1_0-0-debuginfo-32bit-1.2.4-2.6.8\")) flag++;\nif (rpm_check(release:\"SLED12\", sp:\"1\", cpu:\"x86_64\", reference:\"gstreamer-plugins-base-1.2.4-2.6.8\")) flag++;\nif (rpm_check(release:\"SLED12\", sp:\"1\", cpu:\"x86_64\", reference:\"gstreamer-plugins-base-debuginfo-1.2.4-2.6.8\")) flag++;\nif (rpm_check(release:\"SLED12\", sp:\"1\", cpu:\"x86_64\", reference:\"gstreamer-plugins-base-debuginfo-32bit-1.2.4-2.6.8\")) flag++;\nif (rpm_check(release:\"SLED12\", sp:\"1\", cpu:\"x86_64\", reference:\"gstreamer-plugins-base-debugsource-1.2.4-2.6.8\")) flag++;\nif (rpm_check(release:\"SLED12\", sp:\"1\", cpu:\"x86_64\", reference:\"libgstallocators-1_0-0-1.2.4-2.6.8\")) flag++;\nif (rpm_check(release:\"SLED12\", sp:\"1\", cpu:\"x86_64\", reference:\"libgstallocators-1_0-0-debuginfo-1.2.4-2.6.8\")) flag++;\nif (rpm_check(release:\"SLED12\", sp:\"1\", cpu:\"x86_64\", reference:\"libgstapp-1_0-0-1.2.4-2.6.8\")) flag++;\nif (rpm_check(release:\"SLED12\", sp:\"1\", cpu:\"x86_64\", reference:\"libgstapp-1_0-0-32bit-1.2.4-2.6.8\")) flag++;\nif (rpm_check(release:\"SLED12\", sp:\"1\", cpu:\"x86_64\", reference:\"libgstapp-1_0-0-debuginfo-1.2.4-2.6.8\")) flag++;\nif (rpm_check(release:\"SLED12\", sp:\"1\", cpu:\"x86_64\", reference:\"libgstapp-1_0-0-debuginfo-32bit-1.2.4-2.6.8\")) flag++;\nif (rpm_check(release:\"SLED12\", sp:\"1\", cpu:\"x86_64\", reference:\"libgstaudio-1_0-0-1.2.4-2.6.8\")) flag++;\nif (rpm_check(release:\"SLED12\", sp:\"1\", cpu:\"x86_64\", reference:\"libgstaudio-1_0-0-32bit-1.2.4-2.6.8\")) flag++;\nif (rpm_check(release:\"SLED12\", sp:\"1\", cpu:\"x86_64\", reference:\"libgstaudio-1_0-0-debuginfo-1.2.4-2.6.8\")) flag++;\nif (rpm_check(release:\"SLED12\", sp:\"1\", cpu:\"x86_64\", reference:\"libgstaudio-1_0-0-debuginfo-32bit-1.2.4-2.6.8\")) flag++;\nif (rpm_check(release:\"SLED12\", sp:\"1\", cpu:\"x86_64\", reference:\"libgstfft-1_0-0-1.2.4-2.6.8\")) flag++;\nif (rpm_check(release:\"SLED12\", sp:\"1\", cpu:\"x86_64\", reference:\"libgstfft-1_0-0-32bit-1.2.4-2.6.8\")) flag++;\nif (rpm_check(release:\"SLED12\", sp:\"1\", cpu:\"x86_64\", reference:\"libgstfft-1_0-0-debuginfo-1.2.4-2.6.8\")) flag++;\nif (rpm_check(release:\"SLED12\", sp:\"1\", cpu:\"x86_64\", reference:\"libgstfft-1_0-0-debuginfo-32bit-1.2.4-2.6.8\")) flag++;\nif (rpm_check(release:\"SLED12\", sp:\"1\", cpu:\"x86_64\", reference:\"libgstpbutils-1_0-0-1.2.4-2.6.8\")) flag++;\nif (rpm_check(release:\"SLED12\", sp:\"1\", cpu:\"x86_64\", reference:\"libgstpbutils-1_0-0-32bit-1.2.4-2.6.8\")) flag++;\nif (rpm_check(release:\"SLED12\", sp:\"1\", cpu:\"x86_64\", reference:\"libgstpbutils-1_0-0-debuginfo-1.2.4-2.6.8\")) flag++;\nif (rpm_check(release:\"SLED12\", sp:\"1\", cpu:\"x86_64\", reference:\"libgstpbutils-1_0-0-debuginfo-32bit-1.2.4-2.6.8\")) flag++;\nif (rpm_check(release:\"SLED12\", sp:\"1\", cpu:\"x86_64\", reference:\"libgstriff-1_0-0-1.2.4-2.6.8\")) flag++;\nif (rpm_check(release:\"SLED12\", sp:\"1\", cpu:\"x86_64\", reference:\"libgstriff-1_0-0-debuginfo-1.2.4-2.6.8\")) flag++;\nif (rpm_check(release:\"SLED12\", sp:\"1\", cpu:\"x86_64\", reference:\"libgstrtp-1_0-0-1.2.4-2.6.8\")) flag++;\nif (rpm_check(release:\"SLED12\", sp:\"1\", cpu:\"x86_64\", reference:\"libgstrtp-1_0-0-debuginfo-1.2.4-2.6.8\")) flag++;\nif (rpm_check(release:\"SLED12\", sp:\"1\", cpu:\"x86_64\", reference:\"libgstrtsp-1_0-0-1.2.4-2.6.8\")) flag++;\nif (rpm_check(release:\"SLED12\", sp:\"1\", cpu:\"x86_64\", reference:\"libgstrtsp-1_0-0-debuginfo-1.2.4-2.6.8\")) flag++;\nif (rpm_check(release:\"SLED12\", sp:\"1\", cpu:\"x86_64\", reference:\"libgstsdp-1_0-0-1.2.4-2.6.8\")) flag++;\nif (rpm_check(release:\"SLED12\", sp:\"1\", cpu:\"x86_64\", reference:\"libgstsdp-1_0-0-debuginfo-1.2.4-2.6.8\")) flag++;\nif (rpm_check(release:\"SLED12\", sp:\"1\", cpu:\"x86_64\", reference:\"libgsttag-1_0-0-1.2.4-2.6.8\")) flag++;\nif (rpm_check(release:\"SLED12\", sp:\"1\", cpu:\"x86_64\", reference:\"libgsttag-1_0-0-32bit-1.2.4-2.6.8\")) flag++;\nif (rpm_check(release:\"SLED12\", sp:\"1\", cpu:\"x86_64\", reference:\"libgsttag-1_0-0-debuginfo-1.2.4-2.6.8\")) flag++;\nif (rpm_check(release:\"SLED12\", sp:\"1\", cpu:\"x86_64\", reference:\"libgsttag-1_0-0-debuginfo-32bit-1.2.4-2.6.8\")) flag++;\nif (rpm_check(release:\"SLED12\", sp:\"1\", cpu:\"x86_64\", reference:\"libgstvideo-1_0-0-1.2.4-2.6.8\")) flag++;\nif (rpm_check(release:\"SLED12\", sp:\"1\", cpu:\"x86_64\", reference:\"libgstvideo-1_0-0-32bit-1.2.4-2.6.8\")) flag++;\nif (rpm_check(release:\"SLED12\", sp:\"1\", cpu:\"x86_64\", reference:\"libgstvideo-1_0-0-debuginfo-1.2.4-2.6.8\")) flag++;\nif (rpm_check(release:\"SLED12\", sp:\"1\", cpu:\"x86_64\", reference:\"libgstvideo-1_0-0-debuginfo-32bit-1.2.4-2.6.8\")) flag++;\nif (rpm_check(release:\"SLED12\", sp:\"1\", cpu:\"x86_64\", reference:\"typelib-1_0-GstAudio-1_0-1.2.4-2.6.8\")) flag++;\nif (rpm_check(release:\"SLED12\", sp:\"1\", cpu:\"x86_64\", reference:\"typelib-1_0-GstPbutils-1_0-1.2.4-2.6.8\")) flag++;\nif (rpm_check(release:\"SLED12\", sp:\"1\", cpu:\"x86_64\", reference:\"typelib-1_0-GstTag-1_0-1.2.4-2.6.8\")) flag++;\nif (rpm_check(release:\"SLED12\", sp:\"1\", cpu:\"x86_64\", reference:\"typelib-1_0-GstVideo-1_0-1.2.4-2.6.8\")) flag++;\n\n\nif (flag)\n{\n if (report_verbosity > 0) security_warning(port:0, extra:rpm_report_get());\n else security_warning(0);\n exit(0);\n}\nelse\n{\n tested = pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"gstreamer-plugins-base\");\n}\n", "cvss": {"score": 5.0, "vector": "AV:N/AC:L/Au:N/C:N/I:N/A:P"}}, {"lastseen": "2021-01-07T14:25:40", "description": "This update for gstreamer-plugins-base fixes the following security\nissues :\n\n - A crafted AVI file could have caused a floating point\n exception leading to DoS (bsc#1024076, CVE-2017-5837,\n bsc#1024079, CVE-2017-5844)\n\n - A crafted AVI file could have caused a stack overflow\n leading to DoS (bsc#1024047, CVE-2017-5839)\n\n - A crafted SAMI subtitle file could have caused an\n invalid memory access possibly leading to DoS or\n corruption (bsc#1024041, CVE-2017-5842)\n\nNote that Tenable Network Security has extracted the preceding\ndescription block directly from the SUSE security advisory. Tenable\nhas attempted to automatically clean and format it as much as possible\nwithout introducing additional issues.", "edition": 27, "cvss3": {"score": 7.5, "vector": "AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}, "published": "2017-04-19T00:00:00", "title": "SUSE SLED12 / SLES12 Security Update : gstreamer-plugins-base (SUSE-SU-2017:1039-1)", "type": "nessus", "bulletinFamily": "scanner", "cvelist": ["CVE-2017-5844", "CVE-2017-5837", "CVE-2017-5839", "CVE-2017-5842"], "modified": "2017-04-19T00:00:00", "cpe": ["p-cpe:/a:novell:suse_linux:libgstrtp-1_0", "p-cpe:/a:novell:suse_linux:libgstapp-1_0-0", "p-cpe:/a:novell:suse_linux:libgstaudio-1_0-0", "cpe:/o:novell:suse_linux:12", "p-cpe:/a:novell:suse_linux:gstreamer-plugins-base-debuginfo", "p-cpe:/a:novell:suse_linux:libgsttag-1_0-0", "p-cpe:/a:novell:suse_linux:typelib-1_0-GstPbutils", "p-cpe:/a:novell:suse_linux:libgstsdp-1_0", "p-cpe:/a:novell:suse_linux:libgstallocators-1_0-0-debuginfo", "p-cpe:/a:novell:suse_linux:libgsttag-1_0-0-debuginfo", "p-cpe:/a:novell:suse_linux:libgsttag-1_0", "p-cpe:/a:novell:suse_linux:libgstfft-1_0-0", "p-cpe:/a:novell:suse_linux:libgstallocators-1_0", "p-cpe:/a:novell:suse_linux:libgstriff-1_0-0-debuginfo", "p-cpe:/a:novell:suse_linux:libgstrtsp-1_0-0-debuginfo", "p-cpe:/a:novell:suse_linux:libgstapp-1_0", "p-cpe:/a:novell:suse_linux:typelib-1_0-GstVideo", "p-cpe:/a:novell:suse_linux:libgstaudio-1_0-0-debuginfo", "p-cpe:/a:novell:suse_linux:libgstsdp-1_0-0-debuginfo", "p-cpe:/a:novell:suse_linux:libgstpbutils-1_0-0", "p-cpe:/a:novell:suse_linux:libgstrtp-1_0-0-debuginfo", "p-cpe:/a:novell:suse_linux:libgstvideo-1_0", "p-cpe:/a:novell:suse_linux:libgstrtsp-1_0", "p-cpe:/a:novell:suse_linux:gstreamer-plugins-base", "p-cpe:/a:novell:suse_linux:libgstpbutils-1_0-0-debuginfo", "p-cpe:/a:novell:suse_linux:libgstapp-1_0-0-debuginfo", "p-cpe:/a:novell:suse_linux:gstreamer-plugins-base-debugsource", "p-cpe:/a:novell:suse_linux:typelib-1_0-GstAudio", "p-cpe:/a:novell:suse_linux:libgstfft-1_0-0-debuginfo", "p-cpe:/a:novell:suse_linux:libgstvideo-1_0-0", "p-cpe:/a:novell:suse_linux:libgstpbutils-1_0", "p-cpe:/a:novell:suse_linux:libgstriff-1_0", "p-cpe:/a:novell:suse_linux:libgstvideo-1_0-0-debuginfo", "p-cpe:/a:novell:suse_linux:libgstfft-1_0", "p-cpe:/a:novell:suse_linux:libgstaudio-1_0", "p-cpe:/a:novell:suse_linux:typelib-1_0-GstTag"], "id": "SUSE_SU-2017-1039-1.NASL", "href": "https://www.tenable.com/plugins/nessus/99461", "sourceData": "#%NASL_MIN_LEVEL 70300\n#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were\n# extracted from SUSE update advisory SUSE-SU-2017:1039-1.\n# The text itself is copyright (C) SUSE.\n#\n\ninclude('deprecated_nasl_level.inc');\ninclude('compat.inc');\n\nif (description)\n{\n script_id(99461);\n script_version(\"3.7\");\n script_set_attribute(attribute:\"plugin_modification_date\", value:\"2021/01/06\");\n\n script_cve_id(\"CVE-2017-5837\", \"CVE-2017-5839\", \"CVE-2017-5842\", \"CVE-2017-5844\");\n\n script_name(english:\"SUSE SLED12 / SLES12 Security Update : gstreamer-plugins-base (SUSE-SU-2017:1039-1)\");\n script_summary(english:\"Checks rpm output for the updated packages.\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote SUSE host is missing one or more security updates.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"This update for gstreamer-plugins-base fixes the following security\nissues :\n\n - A crafted AVI file could have caused a floating point\n exception leading to DoS (bsc#1024076, CVE-2017-5837,\n bsc#1024079, CVE-2017-5844)\n\n - A crafted AVI file could have caused a stack overflow\n leading to DoS (bsc#1024047, CVE-2017-5839)\n\n - A crafted SAMI subtitle file could have caused an\n invalid memory access possibly leading to DoS or\n corruption (bsc#1024041, CVE-2017-5842)\n\nNote that Tenable Network Security has extracted the preceding\ndescription block directly from the SUSE security advisory. Tenable\nhas attempted to automatically clean and format it as much as possible\nwithout introducing additional issues.\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1024041\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1024047\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1024076\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1024079\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2017-5837/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2017-5839/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2017-5842/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2017-5844/\"\n );\n # https://www.suse.com/support/update/announcement/2017/suse-su-20171039-1/\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://www.nessus.org/u?ae2e3a31\"\n );\n script_set_attribute(\n attribute:\"solution\", \n value:\n\"To install this SUSE Security Update use YaST online_update.\nAlternatively you can run the command listed for your product :\n\nSUSE Linux Enterprise Workstation Extension 12-SP2:zypper in -t patch\nSUSE-SLE-WE-12-SP2-2017-605=1\n\nSUSE Linux Enterprise Software Development Kit 12-SP2:zypper in -t\npatch SUSE-SLE-SDK-12-SP2-2017-605=1\n\nSUSE Linux Enterprise Server for Raspberry Pi 12-SP2:zypper in -t\npatch SUSE-SLE-RPI-12-SP2-2017-605=1\n\nSUSE Linux Enterprise Server 12-SP2:zypper in -t patch\nSUSE-SLE-SERVER-12-SP2-2017-605=1\n\nSUSE Linux Enterprise Desktop 12-SP2:zypper in -t patch\nSUSE-SLE-DESKTOP-12-SP2-2017-605=1\n\nTo bring your system up-to-date, use 'zypper patch'.\"\n );\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P\");\n script_set_cvss_temporal_vector(\"CVSS2#E:U/RL:OF/RC:C\");\n script_set_cvss3_base_vector(\"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\");\n script_set_cvss3_temporal_vector(\"CVSS:3.0/E:U/RL:O/RC:C\");\n script_set_attribute(attribute:\"exploitability_ease\", value:\"No known exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"false\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:gstreamer-plugins-base\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:gstreamer-plugins-base-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:gstreamer-plugins-base-debugsource\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:libgstallocators-1_0\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:libgstallocators-1_0-0-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:libgstapp-1_0\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:libgstapp-1_0-0\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:libgstapp-1_0-0-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:libgstaudio-1_0\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:libgstaudio-1_0-0\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:libgstaudio-1_0-0-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:libgstfft-1_0\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:libgstfft-1_0-0\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:libgstfft-1_0-0-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:libgstpbutils-1_0\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:libgstpbutils-1_0-0\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:libgstpbutils-1_0-0-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:libgstriff-1_0\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:libgstriff-1_0-0-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:libgstrtp-1_0\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:libgstrtp-1_0-0-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:libgstrtsp-1_0\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:libgstrtsp-1_0-0-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:libgstsdp-1_0\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:libgstsdp-1_0-0-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:libgsttag-1_0\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:libgsttag-1_0-0\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:libgsttag-1_0-0-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:libgstvideo-1_0\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:libgstvideo-1_0-0\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:libgstvideo-1_0-0-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:typelib-1_0-GstAudio\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:typelib-1_0-GstPbutils\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:typelib-1_0-GstTag\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:typelib-1_0-GstVideo\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:novell:suse_linux:12\");\n\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2017/02/09\");\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2017/04/18\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2017/04/19\");\n script_set_attribute(attribute:\"generated_plugin\", value:\"current\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2017-2021 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n script_family(english:\"SuSE Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/cpu\", \"Host/SuSE/release\", \"Host/SuSE/rpm-list\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"rpm.inc\");\n\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nrelease = get_kb_item(\"Host/SuSE/release\");\nif (isnull(release) || release !~ \"^(SLED|SLES)\") audit(AUDIT_OS_NOT, \"SUSE\");\nos_ver = pregmatch(pattern: \"^(SLE(S|D)\\d+)\", string:release);\nif (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, \"SUSE\");\nos_ver = os_ver[1];\nif (! preg(pattern:\"^(SLED12|SLES12)$\", string:os_ver)) audit(AUDIT_OS_NOT, \"SUSE SLED12 / SLES12\", \"SUSE \" + os_ver);\n\nif (!get_kb_item(\"Host/SuSE/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (cpu !~ \"^i[3-6]86$\" && \"x86_64\" >!< cpu && \"s390x\" >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"SUSE \" + os_ver, cpu);\nif (cpu >!< \"x86_64\") audit(AUDIT_ARCH_NOT, \"x86_64\", cpu);\n\n\nsp = get_kb_item(\"Host/SuSE/patchlevel\");\nif (isnull(sp)) sp = \"0\";\nif (os_ver == \"SLES12\" && (! preg(pattern:\"^(2)$\", string:sp))) audit(AUDIT_OS_NOT, \"SLES12 SP2\", os_ver + \" SP\" + sp);\nif (os_ver == \"SLED12\" && (! preg(pattern:\"^(2)$\", string:sp))) audit(AUDIT_OS_NOT, \"SLED12 SP2\", os_ver + \" SP\" + sp);\n\n\nflag = 0;\nif (rpm_check(release:\"SLES12\", sp:\"2\", cpu:\"x86_64\", reference:\"gstreamer-plugins-base-1.8.3-12.11\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"2\", cpu:\"x86_64\", reference:\"gstreamer-plugins-base-debuginfo-1.8.3-12.11\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"2\", cpu:\"x86_64\", reference:\"gstreamer-plugins-base-debugsource-1.8.3-12.11\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"2\", cpu:\"x86_64\", reference:\"libgstallocators-1_0-0-1.8.3-12.11\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"2\", cpu:\"x86_64\", reference:\"libgstallocators-1_0-0-debuginfo-1.8.3-12.11\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"2\", cpu:\"x86_64\", reference:\"libgstapp-1_0-0-1.8.3-12.11\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"2\", cpu:\"x86_64\", reference:\"libgstapp-1_0-0-debuginfo-1.8.3-12.11\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"2\", cpu:\"x86_64\", reference:\"libgstaudio-1_0-0-1.8.3-12.11\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"2\", cpu:\"x86_64\", reference:\"libgstaudio-1_0-0-debuginfo-1.8.3-12.11\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"2\", cpu:\"x86_64\", reference:\"libgstfft-1_0-0-1.8.3-12.11\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"2\", cpu:\"x86_64\", reference:\"libgstfft-1_0-0-debuginfo-1.8.3-12.11\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"2\", cpu:\"x86_64\", reference:\"libgstpbutils-1_0-0-1.8.3-12.11\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"2\", cpu:\"x86_64\", reference:\"libgstpbutils-1_0-0-debuginfo-1.8.3-12.11\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"2\", cpu:\"x86_64\", reference:\"libgstriff-1_0-0-1.8.3-12.11\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"2\", cpu:\"x86_64\", reference:\"libgstriff-1_0-0-debuginfo-1.8.3-12.11\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"2\", cpu:\"x86_64\", reference:\"libgstrtp-1_0-0-1.8.3-12.11\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"2\", cpu:\"x86_64\", reference:\"libgstrtp-1_0-0-debuginfo-1.8.3-12.11\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"2\", cpu:\"x86_64\", reference:\"libgstrtsp-1_0-0-1.8.3-12.11\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"2\", cpu:\"x86_64\", reference:\"libgstrtsp-1_0-0-debuginfo-1.8.3-12.11\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"2\", cpu:\"x86_64\", reference:\"libgstsdp-1_0-0-1.8.3-12.11\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"2\", cpu:\"x86_64\", reference:\"libgstsdp-1_0-0-debuginfo-1.8.3-12.11\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"2\", cpu:\"x86_64\", reference:\"libgsttag-1_0-0-1.8.3-12.11\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"2\", cpu:\"x86_64\", reference:\"libgsttag-1_0-0-debuginfo-1.8.3-12.11\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"2\", cpu:\"x86_64\", reference:\"libgstvideo-1_0-0-1.8.3-12.11\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"2\", cpu:\"x86_64\", reference:\"libgstvideo-1_0-0-debuginfo-1.8.3-12.11\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"2\", cpu:\"x86_64\", reference:\"gstreamer-plugins-base-debuginfo-32bit-1.8.3-12.11\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"2\", cpu:\"x86_64\", reference:\"libgstapp-1_0-0-32bit-1.8.3-12.11\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"2\", cpu:\"x86_64\", reference:\"libgstapp-1_0-0-debuginfo-32bit-1.8.3-12.11\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"2\", cpu:\"x86_64\", reference:\"libgstaudio-1_0-0-32bit-1.8.3-12.11\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"2\", cpu:\"x86_64\", reference:\"libgstaudio-1_0-0-debuginfo-32bit-1.8.3-12.11\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"2\", cpu:\"x86_64\", reference:\"libgstpbutils-1_0-0-32bit-1.8.3-12.11\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"2\", cpu:\"x86_64\", reference:\"libgstpbutils-1_0-0-debuginfo-32bit-1.8.3-12.11\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"2\", cpu:\"x86_64\", reference:\"libgsttag-1_0-0-32bit-1.8.3-12.11\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"2\", cpu:\"x86_64\", reference:\"libgsttag-1_0-0-debuginfo-32bit-1.8.3-12.11\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"2\", cpu:\"x86_64\", reference:\"libgstvideo-1_0-0-32bit-1.8.3-12.11\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"2\", cpu:\"x86_64\", reference:\"libgstvideo-1_0-0-debuginfo-32bit-1.8.3-12.11\")) flag++;\nif (rpm_check(release:\"SLED12\", sp:\"2\", cpu:\"x86_64\", reference:\"gstreamer-plugins-base-1.8.3-12.11\")) flag++;\nif (rpm_check(release:\"SLED12\", sp:\"2\", cpu:\"x86_64\", reference:\"gstreamer-plugins-base-debuginfo-1.8.3-12.11\")) flag++;\nif (rpm_check(release:\"SLED12\", sp:\"2\", cpu:\"x86_64\", reference:\"gstreamer-plugins-base-debuginfo-32bit-1.8.3-12.11\")) flag++;\nif (rpm_check(release:\"SLED12\", sp:\"2\", cpu:\"x86_64\", reference:\"gstreamer-plugins-base-debugsource-1.8.3-12.11\")) flag++;\nif (rpm_check(release:\"SLED12\", sp:\"2\", cpu:\"x86_64\", reference:\"libgstallocators-1_0-0-1.8.3-12.11\")) flag++;\nif (rpm_check(release:\"SLED12\", sp:\"2\", cpu:\"x86_64\", reference:\"libgstallocators-1_0-0-debuginfo-1.8.3-12.11\")) flag++;\nif (rpm_check(release:\"SLED12\", sp:\"2\", cpu:\"x86_64\", reference:\"libgstapp-1_0-0-1.8.3-12.11\")) flag++;\nif (rpm_check(release:\"SLED12\", sp:\"2\", cpu:\"x86_64\", reference:\"libgstapp-1_0-0-32bit-1.8.3-12.11\")) flag++;\nif (rpm_check(release:\"SLED12\", sp:\"2\", cpu:\"x86_64\", reference:\"libgstapp-1_0-0-debuginfo-1.8.3-12.11\")) flag++;\nif (rpm_check(release:\"SLED12\", sp:\"2\", cpu:\"x86_64\", reference:\"libgstapp-1_0-0-debuginfo-32bit-1.8.3-12.11\")) flag++;\nif (rpm_check(release:\"SLED12\", sp:\"2\", cpu:\"x86_64\", reference:\"libgstaudio-1_0-0-1.8.3-12.11\")) flag++;\nif (rpm_check(release:\"SLED12\", sp:\"2\", cpu:\"x86_64\", reference:\"libgstaudio-1_0-0-32bit-1.8.3-12.11\")) flag++;\nif (rpm_check(release:\"SLED12\", sp:\"2\", cpu:\"x86_64\", reference:\"libgstaudio-1_0-0-debuginfo-1.8.3-12.11\")) flag++;\nif (rpm_check(release:\"SLED12\", sp:\"2\", cpu:\"x86_64\", reference:\"libgstaudio-1_0-0-debuginfo-32bit-1.8.3-12.11\")) flag++;\nif (rpm_check(release:\"SLED12\", sp:\"2\", cpu:\"x86_64\", reference:\"libgstfft-1_0-0-1.8.3-12.11\")) flag++;\nif (rpm_check(release:\"SLED12\", sp:\"2\", cpu:\"x86_64\", reference:\"libgstfft-1_0-0-32bit-1.8.3-12.11\")) flag++;\nif (rpm_check(release:\"SLED12\", sp:\"2\", cpu:\"x86_64\", reference:\"libgstfft-1_0-0-debuginfo-1.8.3-12.11\")) flag++;\nif (rpm_check(release:\"SLED12\", sp:\"2\", cpu:\"x86_64\", reference:\"libgstfft-1_0-0-debuginfo-32bit-1.8.3-12.11\")) flag++;\nif (rpm_check(release:\"SLED12\", sp:\"2\", cpu:\"x86_64\", reference:\"libgstpbutils-1_0-0-1.8.3-12.11\")) flag++;\nif (rpm_check(release:\"SLED12\", sp:\"2\", cpu:\"x86_64\", reference:\"libgstpbutils-1_0-0-32bit-1.8.3-12.11\")) flag++;\nif (rpm_check(release:\"SLED12\", sp:\"2\", cpu:\"x86_64\", reference:\"libgstpbutils-1_0-0-debuginfo-1.8.3-12.11\")) flag++;\nif (rpm_check(release:\"SLED12\", sp:\"2\", cpu:\"x86_64\", reference:\"libgstpbutils-1_0-0-debuginfo-32bit-1.8.3-12.11\")) flag++;\nif (rpm_check(release:\"SLED12\", sp:\"2\", cpu:\"x86_64\", reference:\"libgstriff-1_0-0-1.8.3-12.11\")) flag++;\nif (rpm_check(release:\"SLED12\", sp:\"2\", cpu:\"x86_64\", reference:\"libgstriff-1_0-0-debuginfo-1.8.3-12.11\")) flag++;\nif (rpm_check(release:\"SLED12\", sp:\"2\", cpu:\"x86_64\", reference:\"libgstrtp-1_0-0-1.8.3-12.11\")) flag++;\nif (rpm_check(release:\"SLED12\", sp:\"2\", cpu:\"x86_64\", reference:\"libgstrtp-1_0-0-debuginfo-1.8.3-12.11\")) flag++;\nif (rpm_check(release:\"SLED12\", sp:\"2\", cpu:\"x86_64\", reference:\"libgstrtsp-1_0-0-1.8.3-12.11\")) flag++;\nif (rpm_check(release:\"SLED12\", sp:\"2\", cpu:\"x86_64\", reference:\"libgstrtsp-1_0-0-debuginfo-1.8.3-12.11\")) flag++;\nif (rpm_check(release:\"SLED12\", sp:\"2\", cpu:\"x86_64\", reference:\"libgstsdp-1_0-0-1.8.3-12.11\")) flag++;\nif (rpm_check(release:\"SLED12\", sp:\"2\", cpu:\"x86_64\", reference:\"libgstsdp-1_0-0-debuginfo-1.8.3-12.11\")) flag++;\nif (rpm_check(release:\"SLED12\", sp:\"2\", cpu:\"x86_64\", reference:\"libgsttag-1_0-0-1.8.3-12.11\")) flag++;\nif (rpm_check(release:\"SLED12\", sp:\"2\", cpu:\"x86_64\", reference:\"libgsttag-1_0-0-32bit-1.8.3-12.11\")) flag++;\nif (rpm_check(release:\"SLED12\", sp:\"2\", cpu:\"x86_64\", reference:\"libgsttag-1_0-0-debuginfo-1.8.3-12.11\")) flag++;\nif (rpm_check(release:\"SLED12\", sp:\"2\", cpu:\"x86_64\", reference:\"libgsttag-1_0-0-debuginfo-32bit-1.8.3-12.11\")) flag++;\nif (rpm_check(release:\"SLED12\", sp:\"2\", cpu:\"x86_64\", reference:\"libgstvideo-1_0-0-1.8.3-12.11\")) flag++;\nif (rpm_check(release:\"SLED12\", sp:\"2\", cpu:\"x86_64\", reference:\"libgstvideo-1_0-0-32bit-1.8.3-12.11\")) flag++;\nif (rpm_check(release:\"SLED12\", sp:\"2\", cpu:\"x86_64\", reference:\"libgstvideo-1_0-0-debuginfo-1.8.3-12.11\")) flag++;\nif (rpm_check(release:\"SLED12\", sp:\"2\", cpu:\"x86_64\", reference:\"libgstvideo-1_0-0-debuginfo-32bit-1.8.3-12.11\")) flag++;\nif (rpm_check(release:\"SLED12\", sp:\"2\", cpu:\"x86_64\", reference:\"typelib-1_0-GstAudio-1_0-1.8.3-12.11\")) flag++;\nif (rpm_check(release:\"SLED12\", sp:\"2\", cpu:\"x86_64\", reference:\"typelib-1_0-GstPbutils-1_0-1.8.3-12.11\")) flag++;\nif (rpm_check(release:\"SLED12\", sp:\"2\", cpu:\"x86_64\", reference:\"typelib-1_0-GstTag-1_0-1.8.3-12.11\")) flag++;\nif (rpm_check(release:\"SLED12\", sp:\"2\", cpu:\"x86_64\", reference:\"typelib-1_0-GstVideo-1_0-1.8.3-12.11\")) flag++;\n\n\nif (flag)\n{\n if (report_verbosity > 0) security_warning(port:0, extra:rpm_report_get());\n else security_warning(0);\n exit(0);\n}\nelse\n{\n tested = pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"gstreamer-plugins-base\");\n}\n", "cvss": {"score": 5.0, "vector": "AV:N/AC:L/Au:N/C:N/I:N/A:P"}}, {"lastseen": "2021-01-07T10:12:42", "description": "Security fix for CVE-2017-5837, CVE-2017-5839, CVE-2017-5842,\nCVE-2017-5844 - Downgrade to 1.10.3 as it is the latest stable release\n\nNote that Tenable Network Security has extracted the preceding\ndescription block directly from the Fedora update system website.\nTenable has attempted to automatically clean and format it as much as\npossible without introducing additional issues.", "edition": 17, "cvss3": {"score": 7.5, "vector": "AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}, "published": "2017-02-21T00:00:00", "title": "Fedora 25 : mingw-gstreamer1-plugins-base (2017-a56d78acb8)", "type": "nessus", "bulletinFamily": "scanner", "cvelist": ["CVE-2017-5844", "CVE-2017-5837", "CVE-2017-5839", "CVE-2017-5842"], "modified": "2017-02-21T00:00:00", "cpe": ["p-cpe:/a:fedoraproject:fedora:mingw-gstreamer1-plugins-base", "cpe:/o:fedoraproject:fedora:25"], "id": "FEDORA_2017-A56D78ACB8.NASL", "href": "https://www.tenable.com/plugins/nessus/97247", "sourceData": "#%NASL_MIN_LEVEL 70300\n#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were \n# extracted from Fedora Security Advisory FEDORA-2017-a56d78acb8.\n#\n\ninclude('deprecated_nasl_level.inc');\ninclude('compat.inc');\n\nif (description)\n{\n script_id(97247);\n script_version(\"3.4\");\n script_set_attribute(attribute:\"plugin_modification_date\", value:\"2021/01/06\");\n\n script_cve_id(\"CVE-2017-5837\", \"CVE-2017-5839\", \"CVE-2017-5842\", \"CVE-2017-5844\");\n script_xref(name:\"FEDORA\", value:\"2017-a56d78acb8\");\n\n script_name(english:\"Fedora 25 : mingw-gstreamer1-plugins-base (2017-a56d78acb8)\");\n script_summary(english:\"Checks rpm output for the updated package.\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote Fedora host is missing a security update.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"Security fix for CVE-2017-5837, CVE-2017-5839, CVE-2017-5842,\nCVE-2017-5844 - Downgrade to 1.10.3 as it is the latest stable release\n\nNote that Tenable Network Security has extracted the preceding\ndescription block directly from the Fedora update system website.\nTenable has attempted to automatically clean and format it as much as\npossible without introducing additional issues.\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bodhi.fedoraproject.org/updates/FEDORA-2017-a56d78acb8\"\n );\n script_set_attribute(\n attribute:\"solution\", \n value:\"Update the affected mingw-gstreamer1-plugins-base package.\"\n );\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P\");\n script_set_cvss3_base_vector(\"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fedoraproject:fedora:mingw-gstreamer1-plugins-base\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:fedoraproject:fedora:25\");\n\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2017/02/09\");\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2017/02/20\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2017/02/21\");\n script_set_attribute(attribute:\"generated_plugin\", value:\"current\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2017-2021 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n script_family(english:\"Fedora Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/RedHat/release\", \"Host/RedHat/rpm-list\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"rpm.inc\");\n\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nrelease = get_kb_item(\"Host/RedHat/release\");\nif (isnull(release) || \"Fedora\" >!< release) audit(AUDIT_OS_NOT, \"Fedora\");\nos_ver = pregmatch(pattern: \"Fedora.*release ([0-9]+)\", string:release);\nif (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, \"Fedora\");\nos_ver = os_ver[1];\nif (! preg(pattern:\"^25([^0-9]|$)\", string:os_ver)) audit(AUDIT_OS_NOT, \"Fedora 25\", \"Fedora \" + os_ver);\n\nif (!get_kb_item(\"Host/RedHat/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (\"x86_64\" >!< cpu && cpu !~ \"^i[3-6]86$\") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"Fedora\", cpu);\n\n\nflag = 0;\nif (rpm_check(release:\"FC25\", reference:\"mingw-gstreamer1-plugins-base-1.10.3-1.fc25\")) flag++;\n\n\nif (flag)\n{\n security_report_v4(\n port : 0,\n severity : SECURITY_WARNING,\n extra : rpm_report_get()\n );\n exit(0);\n}\nelse\n{\n tested = pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"mingw-gstreamer1-plugins-base\");\n}\n", "cvss": {"score": 5.0, "vector": "AV:N/AC:L/Au:N/C:N/I:N/A:P"}}, {"lastseen": "2021-01-20T12:32:16", "description": "This update for gstreamer-plugins-base fixes the following security\nissues :\n\n - A crafted AVI file could have caused a floating point\n exception leading to DoS (bsc#1024076, CVE-2017-5837,\n bsc#1024079, CVE-2017-5844)\n\n - A crafted AVI file could have caused a stack overflow\n leading to DoS (bsc#1024047, CVE-2017-5839)\n\n - A crafted SAMI subtitle file could have caused an\n invalid memory access possibly leading to DoS or\n corruption (bsc#1024041, CVE-2017-5842)", "edition": 17, "cvss3": {"score": 7.5, "vector": "AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}, "published": "2017-03-01T00:00:00", "title": "openSUSE Security Update : gstreamer-plugins-base (openSUSE-2017-301)", "type": "nessus", "bulletinFamily": "scanner", "cvelist": ["CVE-2017-5844", "CVE-2017-5837", "CVE-2017-5839", "CVE-2017-5842"], "modified": "2017-03-01T00:00:00", "cpe": ["p-cpe:/a:novell:opensuse:typelib-1_0-GstPbutils-1_0", "p-cpe:/a:novell:opensuse:typelib-1_0-GstTag-1_0", "p-cpe:/a:novell:opensuse:libgstsdp-1_0-0-debuginfo-32bit", "p-cpe:/a:novell:opensuse:libgstvideo-1_0-0-debuginfo", "p-cpe:/a:novell:opensuse:libgstaudio-1_0-0", "p-cpe:/a:novell:opensuse:libgstpbutils-1_0-0-debuginfo", "p-cpe:/a:novell:opensuse:libgstpbutils-1_0-0-32bit", "p-cpe:/a:novell:opensuse:libgstapp-1_0-0", "p-cpe:/a:novell:opensuse:typelib-1_0-GstSdp-1_0", "p-cpe:/a:novell:opensuse:libgstsdp-1_0-0-debuginfo", "p-cpe:/a:novell:opensuse:libgstsdp-1_0-0-32bit", "p-cpe:/a:novell:opensuse:libgstvideo-1_0-0-debuginfo-32bit", "p-cpe:/a:novell:opensuse:libgstriff-1_0-0-debuginfo-32bit", "p-cpe:/a:novell:opensuse:libgstvideo-1_0-0-32bit", "p-cpe:/a:novell:opensuse:typelib-1_0-GstApp-1_0", "p-cpe:/a:novell:opensuse:libgstrtsp-1_0-0-debuginfo", "p-cpe:/a:novell:opensuse:gstreamer-plugins-base-devel", "p-cpe:/a:novell:opensuse:libgstrtsp-1_0-0-debuginfo-32bit", "p-cpe:/a:novell:opensuse:libgstapp-1_0-0-debuginfo", "p-cpe:/a:novell:opensuse:libgstapp-1_0-0-32bit", "p-cpe:/a:novell:opensuse:typelib-1_0-GstRtp-1_0", "p-cpe:/a:novell:opensuse:libgstallocators-1_0-0-debuginfo", "p-cpe:/a:novell:opensuse:gstreamer-plugins-base-debugsource", "cpe:/o:novell:opensuse:42.1", "p-cpe:/a:novell:opensuse:libgstallocators-1_0-0", "p-cpe:/a:novell:opensuse:gstreamer-plugins-base-lang", "p-cpe:/a:novell:opensuse:libgstallocators-1_0-0-32bit", "p-cpe:/a:novell:opensuse:typelib-1_0-GstAllocators-1_0", "p-cpe:/a:novell:opensuse:libgstfft-1_0-0", "p-cpe:/a:novell:opensuse:gstreamer-plugins-base-debuginfo-32bit", "p-cpe:/a:novell:opensuse:typelib-1_0-GstFft-1_0", "p-cpe:/a:novell:opensuse:gstreamer-plugins-base-debuginfo", "p-cpe:/a:novell:opensuse:libgstrtsp-1_0-0-32bit", "p-cpe:/a:novell:opensuse:libgstpbutils-1_0-0", "p-cpe:/a:novell:opensuse:libgsttag-1_0-0", "p-cpe:/a:novell:opensuse:libgstpbutils-1_0-0-debuginfo-32bit", "p-cpe:/a:novell:opensuse:typelib-1_0-GstRtsp-1_0", "p-cpe:/a:novell:opensuse:libgstriff-1_0-0-debuginfo", "p-cpe:/a:novell:opensuse:libgstallocators-1_0-0-debuginfo-32bit", "p-cpe:/a:novell:opensuse:libgstaudio-1_0-0-32bit", "p-cpe:/a:novell:opensuse:libgstrtp-1_0-0-debuginfo", "p-cpe:/a:novell:opensuse:typelib-1_0-GstRiff-1_0", "p-cpe:/a:novell:opensuse:libgsttag-1_0-0-debuginfo-32bit", "p-cpe:/a:novell:opensuse:libgstsdp-1_0-0", "p-cpe:/a:novell:opensuse:libgstfft-1_0-0-debuginfo-32bit", "p-cpe:/a:novell:opensuse:gstreamer-plugins-base-32bit", "p-cpe:/a:novell:opensuse:libgstrtp-1_0-0", "p-cpe:/a:novell:opensuse:libgstriff-1_0-0", "p-cpe:/a:novell:opensuse:libgstrtp-1_0-0-32bit", "p-cpe:/a:novell:opensuse:libgstriff-1_0-0-32bit", "p-cpe:/a:novell:opensuse:libgstapp-1_0-0-debuginfo-32bit", "p-cpe:/a:novell:opensuse:libgstaudio-1_0-0-debuginfo", "p-cpe:/a:novell:opensuse:libgstaudio-1_0-0-debuginfo-32bit", "p-cpe:/a:novell:opensuse:libgstfft-1_0-0-32bit", "p-cpe:/a:novell:opensuse:typelib-1_0-GstAudio-1_0", "p-cpe:/a:novell:opensuse:libgstfft-1_0-0-debuginfo", "p-cpe:/a:novell:opensuse:libgstvideo-1_0-0", "p-cpe:/a:novell:opensuse:typelib-1_0-GstVideo-1_0", "p-cpe:/a:novell:opensuse:libgstrtp-1_0-0-debuginfo-32bit", "p-cpe:/a:novell:opensuse:libgsttag-1_0-0-debuginfo", "p-cpe:/a:novell:opensuse:gstreamer-plugins-base", "p-cpe:/a:novell:opensuse:libgsttag-1_0-0-32bit", "p-cpe:/a:novell:opensuse:libgstrtsp-1_0-0"], "id": "OPENSUSE-2017-301.NASL", "href": "https://www.tenable.com/plugins/nessus/97458", "sourceData": "#%NASL_MIN_LEVEL 70300\n#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were\n# extracted from openSUSE Security Update openSUSE-2017-301.\n#\n# The text description of this plugin is (C) SUSE LLC.\n#\n\ninclude('deprecated_nasl_level.inc');\ninclude('compat.inc');\n\nif (description)\n{\n script_id(97458);\n script_version(\"3.3\");\n script_set_attribute(attribute:\"plugin_modification_date\", value:\"2021/01/19\");\n\n script_cve_id(\"CVE-2017-5837\", \"CVE-2017-5839\", \"CVE-2017-5842\", \"CVE-2017-5844\");\n\n script_name(english:\"openSUSE Security Update : gstreamer-plugins-base (openSUSE-2017-301)\");\n script_summary(english:\"Check for the openSUSE-2017-301 patch\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote openSUSE host is missing a security update.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"This update for gstreamer-plugins-base fixes the following security\nissues :\n\n - A crafted AVI file could have caused a floating point\n exception leading to DoS (bsc#1024076, CVE-2017-5837,\n bsc#1024079, CVE-2017-5844)\n\n - A crafted AVI file could have caused a stack overflow\n leading to DoS (bsc#1024047, CVE-2017-5839)\n\n - A crafted SAMI subtitle file could have caused an\n invalid memory access possibly leading to DoS or\n corruption (bsc#1024041, CVE-2017-5842)\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=1024041\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=1024047\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=1024076\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=1024079\"\n );\n script_set_attribute(\n attribute:\"solution\", \n value:\"Update the affected gstreamer-plugins-base packages.\"\n );\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P\");\n script_set_cvss3_base_vector(\"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:gstreamer-plugins-base\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:gstreamer-plugins-base-32bit\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:gstreamer-plugins-base-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:gstreamer-plugins-base-debuginfo-32bit\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:gstreamer-plugins-base-debugsource\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:gstreamer-plugins-base-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:gstreamer-plugins-base-lang\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libgstallocators-1_0-0\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libgstallocators-1_0-0-32bit\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libgstallocators-1_0-0-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libgstallocators-1_0-0-debuginfo-32bit\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libgstapp-1_0-0\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libgstapp-1_0-0-32bit\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libgstapp-1_0-0-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libgstapp-1_0-0-debuginfo-32bit\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libgstaudio-1_0-0\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libgstaudio-1_0-0-32bit\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libgstaudio-1_0-0-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libgstaudio-1_0-0-debuginfo-32bit\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libgstfft-1_0-0\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libgstfft-1_0-0-32bit\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libgstfft-1_0-0-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libgstfft-1_0-0-debuginfo-32bit\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libgstpbutils-1_0-0\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libgstpbutils-1_0-0-32bit\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libgstpbutils-1_0-0-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libgstpbutils-1_0-0-debuginfo-32bit\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libgstriff-1_0-0\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libgstriff-1_0-0-32bit\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libgstriff-1_0-0-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libgstriff-1_0-0-debuginfo-32bit\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libgstrtp-1_0-0\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libgstrtp-1_0-0-32bit\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libgstrtp-1_0-0-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libgstrtp-1_0-0-debuginfo-32bit\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libgstrtsp-1_0-0\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libgstrtsp-1_0-0-32bit\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libgstrtsp-1_0-0-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libgstrtsp-1_0-0-debuginfo-32bit\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libgstsdp-1_0-0\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libgstsdp-1_0-0-32bit\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libgstsdp-1_0-0-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libgstsdp-1_0-0-debuginfo-32bit\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libgsttag-1_0-0\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libgsttag-1_0-0-32bit\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libgsttag-1_0-0-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libgsttag-1_0-0-debuginfo-32bit\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libgstvideo-1_0-0\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libgstvideo-1_0-0-32bit\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libgstvideo-1_0-0-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libgstvideo-1_0-0-debuginfo-32bit\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:typelib-1_0-GstAllocators-1_0\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:typelib-1_0-GstApp-1_0\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:typelib-1_0-GstAudio-1_0\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:typelib-1_0-GstFft-1_0\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:typelib-1_0-GstPbutils-1_0\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:typelib-1_0-GstRiff-1_0\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:typelib-1_0-GstRtp-1_0\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:typelib-1_0-GstRtsp-1_0\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:typelib-1_0-GstSdp-1_0\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:typelib-1_0-GstTag-1_0\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:typelib-1_0-GstVideo-1_0\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:novell:opensuse:42.1\");\n\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2017/02/28\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2017/03/01\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2017-2021 Tenable Network Security, Inc.\");\n script_family(english:\"SuSE Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/SuSE/release\", \"Host/SuSE/rpm-list\", \"Host/cpu\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"rpm.inc\");\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nrelease = get_kb_item(\"Host/SuSE/release\");\nif (isnull(release) || release =~ \"^(SLED|SLES)\") audit(AUDIT_OS_NOT, \"openSUSE\");\nif (release !~ \"^(SUSE42\\.1)$\") audit(AUDIT_OS_RELEASE_NOT, \"openSUSE\", \"42.1\", release);\nif (!get_kb_item(\"Host/SuSE/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\nourarch = get_kb_item(\"Host/cpu\");\nif (!ourarch) audit(AUDIT_UNKNOWN_ARCH);\nif (ourarch !~ \"^(i586|i686|x86_64)$\") audit(AUDIT_ARCH_NOT, \"i586 / i686 / x86_64\", ourarch);\n\nflag = 0;\n\nif ( rpm_check(release:\"SUSE42.1\", reference:\"gstreamer-plugins-base-1.4.5-8.1\") ) flag++;\nif ( rpm_check(release:\"SUSE42.1\", reference:\"gstreamer-plugins-base-debuginfo-1.4.5-8.1\") ) flag++;\nif ( rpm_check(release:\"SUSE42.1\", reference:\"gstreamer-plugins-base-debugsource-1.4.5-8.1\") ) flag++;\nif ( rpm_check(release:\"SUSE42.1\", reference:\"gstreamer-plugins-base-devel-1.4.5-8.1\") ) flag++;\nif ( rpm_check(release:\"SUSE42.1\", reference:\"gstreamer-plugins-base-lang-1.4.5-8.1\") ) flag++;\nif ( rpm_check(release:\"SUSE42.1\", reference:\"libgstallocators-1_0-0-1.4.5-8.1\") ) flag++;\nif ( rpm_check(release:\"SUSE42.1\", reference:\"libgstallocators-1_0-0-debuginfo-1.4.5-8.1\") ) flag++;\nif ( rpm_check(release:\"SUSE42.1\", reference:\"libgstapp-1_0-0-1.4.5-8.1\") ) flag++;\nif ( rpm_check(release:\"SUSE42.1\", reference:\"libgstapp-1_0-0-debuginfo-1.4.5-8.1\") ) flag++;\nif ( rpm_check(release:\"SUSE42.1\", reference:\"libgstaudio-1_0-0-1.4.5-8.1\") ) flag++;\nif ( rpm_check(release:\"SUSE42.1\", reference:\"libgstaudio-1_0-0-debuginfo-1.4.5-8.1\") ) flag++;\nif ( rpm_check(release:\"SUSE42.1\", reference:\"libgstfft-1_0-0-1.4.5-8.1\") ) flag++;\nif ( rpm_check(release:\"SUSE42.1\", reference:\"libgstfft-1_0-0-debuginfo-1.4.5-8.1\") ) flag++;\nif ( rpm_check(release:\"SUSE42.1\", reference:\"libgstpbutils-1_0-0-1.4.5-8.1\") ) flag++;\nif ( rpm_check(release:\"SUSE42.1\", reference:\"libgstpbutils-1_0-0-debuginfo-1.4.5-8.1\") ) flag++;\nif ( rpm_check(release:\"SUSE42.1\", reference:\"libgstriff-1_0-0-1.4.5-8.1\") ) flag++;\nif ( rpm_check(release:\"SUSE42.1\", reference:\"libgstriff-1_0-0-debuginfo-1.4.5-8.1\") ) flag++;\nif ( rpm_check(release:\"SUSE42.1\", reference:\"libgstrtp-1_0-0-1.4.5-8.1\") ) flag++;\nif ( rpm_check(release:\"SUSE42.1\", reference:\"libgstrtp-1_0-0-debuginfo-1.4.5-8.1\") ) flag++;\nif ( rpm_check(release:\"SUSE42.1\", reference:\"libgstrtsp-1_0-0-1.4.5-8.1\") ) flag++;\nif ( rpm_check(release:\"SUSE42.1\", reference:\"libgstrtsp-1_0-0-debuginfo-1.4.5-8.1\") ) flag++;\nif ( rpm_check(release:\"SUSE42.1\", reference:\"libgstsdp-1_0-0-1.4.5-8.1\") ) flag++;\nif ( rpm_check(release:\"SUSE42.1\", reference:\"libgstsdp-1_0-0-debuginfo-1.4.5-8.1\") ) flag++;\nif ( rpm_check(release:\"SUSE42.1\", reference:\"libgsttag-1_0-0-1.4.5-8.1\") ) flag++;\nif ( rpm_check(release:\"SUSE42.1\", reference:\"libgsttag-1_0-0-debuginfo-1.4.5-8.1\") ) flag++;\nif ( rpm_check(release:\"SUSE42.1\", reference:\"libgstvideo-1_0-0-1.4.5-8.1\") ) flag++;\nif ( rpm_check(release:\"SUSE42.1\", reference:\"libgstvideo-1_0-0-debuginfo-1.4.5-8.1\") ) flag++;\nif ( rpm_check(release:\"SUSE42.1\", reference:\"typelib-1_0-GstAllocators-1_0-1.4.5-8.1\") ) flag++;\nif ( rpm_check(release:\"SUSE42.1\", reference:\"typelib-1_0-GstApp-1_0-1.4.5-8.1\") ) flag++;\nif ( rpm_check(release:\"SUSE42.1\", reference:\"typelib-1_0-GstAudio-1_0-1.4.5-8.1\") ) flag++;\nif ( rpm_check(release:\"SUSE42.1\", reference:\"typelib-1_0-GstFft-1_0-1.4.5-8.1\") ) flag++;\nif ( rpm_check(release:\"SUSE42.1\", reference:\"typelib-1_0-GstPbutils-1_0-1.4.5-8.1\") ) flag++;\nif ( rpm_check(release:\"SUSE42.1\", reference:\"typelib-1_0-GstRiff-1_0-1.4.5-8.1\") ) flag++;\nif ( rpm_check(release:\"SUSE42.1\", reference:\"typelib-1_0-GstRtp-1_0-1.4.5-8.1\") ) flag++;\nif ( rpm_check(release:\"SUSE42.1\", reference:\"typelib-1_0-GstRtsp-1_0-1.4.5-8.1\") ) flag++;\nif ( rpm_check(release:\"SUSE42.1\", reference:\"typelib-1_0-GstSdp-1_0-1.4.5-8.1\") ) flag++;\nif ( rpm_check(release:\"SUSE42.1\", reference:\"typelib-1_0-GstTag-1_0-1.4.5-8.1\") ) flag++;\nif ( rpm_check(release:\"SUSE42.1\", reference:\"typelib-1_0-GstVideo-1_0-1.4.5-8.1\") ) flag++;\nif ( rpm_check(release:\"SUSE42.1\", cpu:\"x86_64\", reference:\"gstreamer-plugins-base-32bit-1.4.5-8.1\") ) flag++;\nif ( rpm_check(release:\"SUSE42.1\", cpu:\"x86_64\", reference:\"gstreamer-plugins-base-debuginfo-32bit-1.4.5-8.1\") ) flag++;\nif ( rpm_check(release:\"SUSE42.1\", cpu:\"x86_64\", reference:\"libgstallocators-1_0-0-32bit-1.4.5-8.1\") ) flag++;\nif ( rpm_check(release:\"SUSE42.1\", cpu:\"x86_64\", reference:\"libgstallocators-1_0-0-debuginfo-32bit-1.4.5-8.1\") ) flag++;\nif ( rpm_check(release:\"SUSE42.1\", cpu:\"x86_64\", reference:\"libgstapp-1_0-0-32bit-1.4.5-8.1\") ) flag++;\nif ( rpm_check(release:\"SUSE42.1\", cpu:\"x86_64\", reference:\"libgstapp-1_0-0-debuginfo-32bit-1.4.5-8.1\") ) flag++;\nif ( rpm_check(release:\"SUSE42.1\", cpu:\"x86_64\", reference:\"libgstaudio-1_0-0-32bit-1.4.5-8.1\") ) flag++;\nif ( rpm_check(release:\"SUSE42.1\", cpu:\"x86_64\", reference:\"libgstaudio-1_0-0-debuginfo-32bit-1.4.5-8.1\") ) flag++;\nif ( rpm_check(release:\"SUSE42.1\", cpu:\"x86_64\", reference:\"libgstfft-1_0-0-32bit-1.4.5-8.1\") ) flag++;\nif ( rpm_check(release:\"SUSE42.1\", cpu:\"x86_64\", reference:\"libgstfft-1_0-0-debuginfo-32bit-1.4.5-8.1\") ) flag++;\nif ( rpm_check(release:\"SUSE42.1\", cpu:\"x86_64\", reference:\"libgstpbutils-1_0-0-32bit-1.4.5-8.1\") ) flag++;\nif ( rpm_check(release:\"SUSE42.1\", cpu:\"x86_64\", reference:\"libgstpbutils-1_0-0-debuginfo-32bit-1.4.5-8.1\") ) flag++;\nif ( rpm_check(release:\"SUSE42.1\", cpu:\"x86_64\", reference:\"libgstriff-1_0-0-32bit-1.4.5-8.1\") ) flag++;\nif ( rpm_check(release:\"SUSE42.1\", cpu:\"x86_64\", reference:\"libgstriff-1_0-0-debuginfo-32bit-1.4.5-8.1\") ) flag++;\nif ( rpm_check(release:\"SUSE42.1\", cpu:\"x86_64\", reference:\"libgstrtp-1_0-0-32bit-1.4.5-8.1\") ) flag++;\nif ( rpm_check(release:\"SUSE42.1\", cpu:\"x86_64\", reference:\"libgstrtp-1_0-0-debuginfo-32bit-1.4.5-8.1\") ) flag++;\nif ( rpm_check(release:\"SUSE42.1\", cpu:\"x86_64\", reference:\"libgstrtsp-1_0-0-32bit-1.4.5-8.1\") ) flag++;\nif ( rpm_check(release:\"SUSE42.1\", cpu:\"x86_64\", reference:\"libgstrtsp-1_0-0-debuginfo-32bit-1.4.5-8.1\") ) flag++;\nif ( rpm_check(release:\"SUSE42.1\", cpu:\"x86_64\", reference:\"libgstsdp-1_0-0-32bit-1.4.5-8.1\") ) flag++;\nif ( rpm_check(release:\"SUSE42.1\", cpu:\"x86_64\", reference:\"libgstsdp-1_0-0-debuginfo-32bit-1.4.5-8.1\") ) flag++;\nif ( rpm_check(release:\"SUSE42.1\", cpu:\"x86_64\", reference:\"libgsttag-1_0-0-32bit-1.4.5-8.1\") ) flag++;\nif ( rpm_check(release:\"SUSE42.1\", cpu:\"x86_64\", reference:\"libgsttag-1_0-0-debuginfo-32bit-1.4.5-8.1\") ) flag++;\nif ( rpm_check(release:\"SUSE42.1\", cpu:\"x86_64\", reference:\"libgstvideo-1_0-0-32bit-1.4.5-8.1\") ) flag++;\nif ( rpm_check(release:\"SUSE42.1\", cpu:\"x86_64\", reference:\"libgstvideo-1_0-0-debuginfo-32bit-1.4.5-8.1\") ) flag++;\n\nif (flag)\n{\n if (report_verbosity > 0) security_warning(port:0, extra:rpm_report_get());\n else security_warning(0);\n exit(0);\n}\nelse\n{\n tested = pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"gstreamer-plugins-base / gstreamer-plugins-base-32bit / etc\");\n}\n", "cvss": {"score": 5.0, "vector": "AV:N/AC:L/Au:N/C:N/I:N/A:P"}}, {"lastseen": "2021-01-20T12:32:36", "description": "This update for gstreamer-plugins-base fixes the following security\nissues :\n\n - A crafted AVI file could have caused a floating point\n exception leading to DoS (bsc#1024076, CVE-2017-5837,\n bsc#1024079, CVE-2017-5844)\n\n - A crafted AVI file could have caused a stack overflow\n leading to DoS (bsc#1024047, CVE-2017-5839)\n\n - A crafted SAMI subtitle file could have caused an\n invalid memory access possibly leading to DoS or\n corruption (bsc#1024041, CVE-2017-5842)\n\nThis update was imported from the SUSE:SLE-12-SP2:Update update\nproject.", "edition": 17, "cvss3": {"score": 7.5, "vector": "AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}, "published": "2017-04-27T00:00:00", "title": "openSUSE Security Update : gstreamer-plugins-base (openSUSE-2017-512)", "type": "nessus", "bulletinFamily": "scanner", "cvelist": ["CVE-2017-5844", "CVE-2017-5837", "CVE-2017-5839", "CVE-2017-5842"], "modified": "2017-04-27T00:00:00", "cpe": ["p-cpe:/a:novell:opensuse:typelib-1_0-GstPbutils-1_0", "p-cpe:/a:novell:opensuse:typelib-1_0-GstTag-1_0", "p-cpe:/a:novell:opensuse:libgstsdp-1_0-0-debuginfo-32bit", "p-cpe:/a:novell:opensuse:libgstvideo-1_0-0-debuginfo", "p-cpe:/a:novell:opensuse:libgstaudio-1_0-0", "p-cpe:/a:novell:opensuse:libgstpbutils-1_0-0-debuginfo", "p-cpe:/a:novell:opensuse:libgstpbutils-1_0-0-32bit", "p-cpe:/a:novell:opensuse:libgstapp-1_0-0", "p-cpe:/a:novell:opensuse:typelib-1_0-GstSdp-1_0", "p-cpe:/a:novell:opensuse:libgstsdp-1_0-0-debuginfo", "p-cpe:/a:novell:opensuse:libgstsdp-1_0-0-32bit", "p-cpe:/a:novell:opensuse:libgstvideo-1_0-0-debuginfo-32bit", "p-cpe:/a:novell:opensuse:libgstriff-1_0-0-debuginfo-32bit", "p-cpe:/a:novell:opensuse:libgstvideo-1_0-0-32bit", "p-cpe:/a:novell:opensuse:typelib-1_0-GstApp-1_0", "p-cpe:/a:novell:opensuse:libgstrtsp-1_0-0-debuginfo", "p-cpe:/a:novell:opensuse:gstreamer-plugins-base-devel", "p-cpe:/a:novell:opensuse:libgstrtsp-1_0-0-debuginfo-32bit", "p-cpe:/a:novell:opensuse:libgstapp-1_0-0-debuginfo", "p-cpe:/a:novell:opensuse:libgstapp-1_0-0-32bit", "p-cpe:/a:novell:opensuse:typelib-1_0-GstRtp-1_0", "p-cpe:/a:novell:opensuse:libgstallocators-1_0-0-debuginfo", "p-cpe:/a:novell:opensuse:gstreamer-plugins-base-debugsource", "p-cpe:/a:novell:opensuse:libgstallocators-1_0-0", "p-cpe:/a:novell:opensuse:gstreamer-plugins-base-lang", "p-cpe:/a:novell:opensuse:libgstallocators-1_0-0-32bit", "p-cpe:/a:novell:opensuse:gstreamer-plugins-base-devel-32bit", "p-cpe:/a:novell:opensuse:typelib-1_0-GstAllocators-1_0", "p-cpe:/a:novell:opensuse:libgstfft-1_0-0", "p-cpe:/a:novell:opensuse:gstreamer-plugins-base-debuginfo-32bit", "p-cpe:/a:novell:opensuse:typelib-1_0-GstFft-1_0", "p-cpe:/a:novell:opensuse:gstreamer-plugins-base-debuginfo", "p-cpe:/a:novell:opensuse:libgstrtsp-1_0-0-32bit", "p-cpe:/a:novell:opensuse:libgstpbutils-1_0-0", "p-cpe:/a:novell:opensuse:libgsttag-1_0-0", "p-cpe:/a:novell:opensuse:libgstpbutils-1_0-0-debuginfo-32bit", "p-cpe:/a:novell:opensuse:typelib-1_0-GstRtsp-1_0", "p-cpe:/a:novell:opensuse:libgstriff-1_0-0-debuginfo", "p-cpe:/a:novell:opensuse:libgstallocators-1_0-0-debuginfo-32bit", "p-cpe:/a:novell:opensuse:libgstaudio-1_0-0-32bit", "p-cpe:/a:novell:opensuse:libgstrtp-1_0-0-debuginfo", "p-cpe:/a:novell:opensuse:libgsttag-1_0-0-debuginfo-32bit", "p-cpe:/a:novell:opensuse:libgstsdp-1_0-0", "p-cpe:/a:novell:opensuse:libgstfft-1_0-0-debuginfo-32bit", "p-cpe:/a:novell:opensuse:gstreamer-plugins-base-32bit", "p-cpe:/a:novell:opensuse:libgstrtp-1_0-0", "cpe:/o:novell:opensuse:42.2", "p-cpe:/a:novell:opensuse:libgstriff-1_0-0", "p-cpe:/a:novell:opensuse:libgstrtp-1_0-0-32bit", "p-cpe:/a:novell:opensuse:libgstriff-1_0-0-32bit", "p-cpe:/a:novell:opensuse:libgstapp-1_0-0-debuginfo-32bit", "p-cpe:/a:novell:opensuse:libgstaudio-1_0-0-debuginfo", "p-cpe:/a:novell:opensuse:libgstaudio-1_0-0-debuginfo-32bit", "p-cpe:/a:novell:opensuse:libgstfft-1_0-0-32bit", "p-cpe:/a:novell:opensuse:typelib-1_0-GstAudio-1_0", "p-cpe:/a:novell:opensuse:libgstfft-1_0-0-debuginfo", "p-cpe:/a:novell:opensuse:libgstvideo-1_0-0", "p-cpe:/a:novell:opensuse:typelib-1_0-GstVideo-1_0", "p-cpe:/a:novell:opensuse:libgstrtp-1_0-0-debuginfo-32bit", "p-cpe:/a:novell:opensuse:libgsttag-1_0-0-debuginfo", "p-cpe:/a:novell:opensuse:gstreamer-plugins-base", "p-cpe:/a:novell:opensuse:libgsttag-1_0-0-32bit", "p-cpe:/a:novell:opensuse:libgstrtsp-1_0-0"], "id": "OPENSUSE-2017-512.NASL", "href": "https://www.tenable.com/plugins/nessus/99701", "sourceData": "#%NASL_MIN_LEVEL 70300\n#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were\n# extracted from openSUSE Security Update openSUSE-2017-512.\n#\n# The text description of this plugin is (C) SUSE LLC.\n#\n\ninclude('deprecated_nasl_level.inc');\ninclude('compat.inc');\n\nif (description)\n{\n script_id(99701);\n script_version(\"3.3\");\n script_set_attribute(attribute:\"plugin_modification_date\", value:\"2021/01/19\");\n\n script_cve_id(\"CVE-2017-5837\", \"CVE-2017-5839\", \"CVE-2017-5842\", \"CVE-2017-5844\");\n\n script_name(english:\"openSUSE Security Update : gstreamer-plugins-base (openSUSE-2017-512)\");\n script_summary(english:\"Check for the openSUSE-2017-512 patch\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote openSUSE host is missing a security update.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"This update for gstreamer-plugins-base fixes the following security\nissues :\n\n - A crafted AVI file could have caused a floating point\n exception leading to DoS (bsc#1024076, CVE-2017-5837,\n bsc#1024079, CVE-2017-5844)\n\n - A crafted AVI file could have caused a stack overflow\n leading to DoS (bsc#1024047, CVE-2017-5839)\n\n - A crafted SAMI subtitle file could have caused an\n invalid memory access possibly leading to DoS or\n corruption (bsc#1024041, CVE-2017-5842)\n\nThis update was imported from the SUSE:SLE-12-SP2:Update update\nproject.\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=1024041\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=1024047\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=1024076\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=1024079\"\n );\n script_set_attribute(\n attribute:\"solution\", \n value:\"Update the affected gstreamer-plugins-base packages.\"\n );\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P\");\n script_set_cvss3_base_vector(\"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:gstreamer-plugins-base\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:gstreamer-plugins-base-32bit\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:gstreamer-plugins-base-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:gstreamer-plugins-base-debuginfo-32bit\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:gstreamer-plugins-base-debugsource\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:gstreamer-plugins-base-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:gstreamer-plugins-base-devel-32bit\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:gstreamer-plugins-base-lang\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libgstallocators-1_0-0\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libgstallocators-1_0-0-32bit\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libgstallocators-1_0-0-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libgstallocators-1_0-0-debuginfo-32bit\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libgstapp-1_0-0\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libgstapp-1_0-0-32bit\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libgstapp-1_0-0-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libgstapp-1_0-0-debuginfo-32bit\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libgstaudio-1_0-0\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libgstaudio-1_0-0-32bit\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libgstaudio-1_0-0-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libgstaudio-1_0-0-debuginfo-32bit\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libgstfft-1_0-0\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libgstfft-1_0-0-32bit\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libgstfft-1_0-0-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libgstfft-1_0-0-debuginfo-32bit\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libgstpbutils-1_0-0\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libgstpbutils-1_0-0-32bit\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libgstpbutils-1_0-0-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libgstpbutils-1_0-0-debuginfo-32bit\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libgstriff-1_0-0\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libgstriff-1_0-0-32bit\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libgstriff-1_0-0-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libgstriff-1_0-0-debuginfo-32bit\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libgstrtp-1_0-0\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libgstrtp-1_0-0-32bit\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libgstrtp-1_0-0-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libgstrtp-1_0-0-debuginfo-32bit\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libgstrtsp-1_0-0\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libgstrtsp-1_0-0-32bit\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libgstrtsp-1_0-0-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libgstrtsp-1_0-0-debuginfo-32bit\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libgstsdp-1_0-0\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libgstsdp-1_0-0-32bit\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libgstsdp-1_0-0-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libgstsdp-1_0-0-debuginfo-32bit\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libgsttag-1_0-0\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libgsttag-1_0-0-32bit\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libgsttag-1_0-0-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libgsttag-1_0-0-debuginfo-32bit\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libgstvideo-1_0-0\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libgstvideo-1_0-0-32bit\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libgstvideo-1_0-0-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:libgstvideo-1_0-0-debuginfo-32bit\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:typelib-1_0-GstAllocators-1_0\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:typelib-1_0-GstApp-1_0\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:typelib-1_0-GstAudio-1_0\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:typelib-1_0-GstFft-1_0\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:typelib-1_0-GstPbutils-1_0\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:typelib-1_0-GstRtp-1_0\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:typelib-1_0-GstRtsp-1_0\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:typelib-1_0-GstSdp-1_0\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:typelib-1_0-GstTag-1_0\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:typelib-1_0-GstVideo-1_0\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:novell:opensuse:42.2\");\n\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2017/04/26\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2017/04/27\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2017-2021 Tenable Network Security, Inc.\");\n script_family(english:\"SuSE Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/SuSE/release\", \"Host/SuSE/rpm-list\", \"Host/cpu\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"rpm.inc\");\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nrelease = get_kb_item(\"Host/SuSE/release\");\nif (isnull(release) || release =~ \"^(SLED|SLES)\") audit(AUDIT_OS_NOT, \"openSUSE\");\nif (release !~ \"^(SUSE42\\.2)$\") audit(AUDIT_OS_RELEASE_NOT, \"openSUSE\", \"42.2\", release);\nif (!get_kb_item(\"Host/SuSE/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\nourarch = get_kb_item(\"Host/cpu\");\nif (!ourarch) audit(AUDIT_UNKNOWN_ARCH);\nif (ourarch !~ \"^(i586|i686|x86_64)$\") audit(AUDIT_ARCH_NOT, \"i586 / i686 / x86_64\", ourarch);\n\nflag = 0;\n\nif ( rpm_check(release:\"SUSE42.2\", reference:\"gstreamer-plugins-base-1.8.3-5.3.2\") ) flag++;\nif ( rpm_check(release:\"SUSE42.2\", reference:\"gstreamer-plugins-base-debuginfo-1.8.3-5.3.2\") ) flag++;\nif ( rpm_check(release:\"SUSE42.2\", reference:\"gstreamer-plugins-base-debugsource-1.8.3-5.3.2\") ) flag++;\nif ( rpm_check(release:\"SUSE42.2\", reference:\"gstreamer-plugins-base-devel-1.8.3-5.3.2\") ) flag++;\nif ( rpm_check(release:\"SUSE42.2\", reference:\"gstreamer-plugins-base-lang-1.8.3-5.3.2\") ) flag++;\nif ( rpm_check(release:\"SUSE42.2\", reference:\"libgstallocators-1_0-0-1.8.3-5.3.2\") ) flag++;\nif ( rpm_check(release:\"SUSE42.2\", reference:\"libgstallocators-1_0-0-debuginfo-1.8.3-5.3.2\") ) flag++;\nif ( rpm_check(release:\"SUSE42.2\", reference:\"libgstapp-1_0-0-1.8.3-5.3.2\") ) flag++;\nif ( rpm_check(release:\"SUSE42.2\", reference:\"libgstapp-1_0-0-debuginfo-1.8.3-5.3.2\") ) flag++;\nif ( rpm_check(release:\"SUSE42.2\", reference:\"libgstaudio-1_0-0-1.8.3-5.3.2\") ) flag++;\nif ( rpm_check(release:\"SUSE42.2\", reference:\"libgstaudio-1_0-0-debuginfo-1.8.3-5.3.2\") ) flag++;\nif ( rpm_check(release:\"SUSE42.2\", reference:\"libgstfft-1_0-0-1.8.3-5.3.2\") ) flag++;\nif ( rpm_check(release:\"SUSE42.2\", reference:\"libgstfft-1_0-0-debuginfo-1.8.3-5.3.2\") ) flag++;\nif ( rpm_check(release:\"SUSE42.2\", reference:\"libgstpbutils-1_0-0-1.8.3-5.3.2\") ) flag++;\nif ( rpm_check(release:\"SUSE42.2\", reference:\"libgstpbutils-1_0-0-debuginfo-1.8.3-5.3.2\") ) flag++;\nif ( rpm_check(release:\"SUSE42.2\", reference:\"libgstriff-1_0-0-1.8.3-5.3.2\") ) flag++;\nif ( rpm_check(release:\"SUSE42.2\", reference:\"libgstriff-1_0-0-debuginfo-1.8.3-5.3.2\") ) flag++;\nif ( rpm_check(release:\"SUSE42.2\", reference:\"libgstrtp-1_0-0-1.8.3-5.3.2\") ) flag++;\nif ( rpm_check(release:\"SUSE42.2\", reference:\"libgstrtp-1_0-0-debuginfo-1.8.3-5.3.2\") ) flag++;\nif ( rpm_check(release:\"SUSE42.2\", reference:\"libgstrtsp-1_0-0-1.8.3-5.3.2\") ) flag++;\nif ( rpm_check(release:\"SUSE42.2\", reference:\"libgstrtsp-1_0-0-debuginfo-1.8.3-5.3.2\") ) flag++;\nif ( rpm_check(release:\"SUSE42.2\", reference:\"libgstsdp-1_0-0-1.8.3-5.3.2\") ) flag++;\nif ( rpm_check(release:\"SUSE42.2\", reference:\"libgstsdp-1_0-0-debuginfo-1.8.3-5.3.2\") ) flag++;\nif ( rpm_check(release:\"SUSE42.2\", reference:\"libgsttag-1_0-0-1.8.3-5.3.2\") ) flag++;\nif ( rpm_check(release:\"SUSE42.2\", reference:\"libgsttag-1_0-0-debuginfo-1.8.3-5.3.2\") ) flag++;\nif ( rpm_check(release:\"SUSE42.2\", reference:\"libgstvideo-1_0-0-1.8.3-5.3.2\") ) flag++;\nif ( rpm_check(release:\"SUSE42.2\", reference:\"libgstvideo-1_0-0-debuginfo-1.8.3-5.3.2\") ) flag++;\nif ( rpm_check(release:\"SUSE42.2\", reference:\"typelib-1_0-GstAllocators-1_0-1.8.3-5.3.2\") ) flag++;\nif ( rpm_check(release:\"SUSE42.2\", reference:\"typelib-1_0-GstApp-1_0-1.8.3-5.3.2\") ) flag++;\nif ( rpm_check(release:\"SUSE42.2\", reference:\"typelib-1_0-GstAudio-1_0-1.8.3-5.3.2\") ) flag++;\nif ( rpm_check(release:\"SUSE42.2\", reference:\"typelib-1_0-GstFft-1_0-1.8.3-5.3.2\") ) flag++;\nif ( rpm_check(release:\"SUSE42.2\", reference:\"typelib-1_0-GstPbutils-1_0-1.8.3-5.3.2\") ) flag++;\nif ( rpm_check(release:\"SUSE42.2\", reference:\"typelib-1_0-GstRtp-1_0-1.8.3-5.3.2\") ) flag++;\nif ( rpm_check(release:\"SUSE42.2\", reference:\"typelib-1_0-GstRtsp-1_0-1.8.3-5.3.2\") ) flag++;\nif ( rpm_check(release:\"SUSE42.2\", reference:\"typelib-1_0-GstSdp-1_0-1.8.3-5.3.2\") ) flag++;\nif ( rpm_check(release:\"SUSE42.2\", reference:\"typelib-1_0-GstTag-1_0-1.8.3-5.3.2\") ) flag++;\nif ( rpm_check(release:\"SUSE42.2\", reference:\"typelib-1_0-GstVideo-1_0-1.8.3-5.3.2\") ) flag++;\nif ( rpm_check(release:\"SUSE42.2\", cpu:\"x86_64\", reference:\"gstreamer-plugins-base-32bit-1.8.3-5.3.2\") ) flag++;\nif ( rpm_check(release:\"SUSE42.2\", cpu:\"x86_64\", reference:\"gstreamer-plugins-base-debuginfo-32bit-1.8.3-5.3.2\") ) flag++;\nif ( rpm_check(release:\"SUSE42.2\", cpu:\"x86_64\", reference:\"gstreamer-plugins-base-devel-32bit-1.8.3-5.3.2\") ) flag++;\nif ( rpm_check(release:\"SUSE42.2\", cpu:\"x86_64\", reference:\"libgstallocators-1_0-0-32bit-1.8.3-5.3.2\") ) flag++;\nif ( rpm_check(release:\"SUSE42.2\", cpu:\"x86_64\", reference:\"libgstallocators-1_0-0-debuginfo-32bit-1.8.3-5.3.2\") ) flag++;\nif ( rpm_check(release:\"SUSE42.2\", cpu:\"x86_64\", reference:\"libgstapp-1_0-0-32bit-1.8.3-5.3.2\") ) flag++;\nif ( rpm_check(release:\"SUSE42.2\", cpu:\"x86_64\", reference:\"libgstapp-1_0-0-debuginfo-32bit-1.8.3-5.3.2\") ) flag++;\nif ( rpm_check(release:\"SUSE42.2\", cpu:\"x86_64\", reference:\"libgstaudio-1_0-0-32bit-1.8.3-5.3.2\") ) flag++;\nif ( rpm_check(release:\"SUSE42.2\", cpu:\"x86_64\", reference:\"libgstaudio-1_0-0-debuginfo-32bit-1.8.3-5.3.2\") ) flag++;\nif ( rpm_check(release:\"SUSE42.2\", cpu:\"x86_64\", reference:\"libgstfft-1_0-0-32bit-1.8.3-5.3.2\") ) flag++;\nif ( rpm_check(release:\"SUSE42.2\", cpu:\"x86_64\", reference:\"libgstfft-1_0-0-debuginfo-32bit-1.8.3-5.3.2\") ) flag++;\nif ( rpm_check(release:\"SUSE42.2\", cpu:\"x86_64\", reference:\"libgstpbutils-1_0-0-32bit-1.8.3-5.3.2\") ) flag++;\nif ( rpm_check(release:\"SUSE42.2\", cpu:\"x86_64\", reference:\"libgstpbutils-1_0-0-debuginfo-32bit-1.8.3-5.3.2\") ) flag++;\nif ( rpm_check(release:\"SUSE42.2\", cpu:\"x86_64\", reference:\"libgstriff-1_0-0-32bit-1.8.3-5.3.2\") ) flag++;\nif ( rpm_check(release:\"SUSE42.2\", cpu:\"x86_64\", reference:\"libgstriff-1_0-0-debuginfo-32bit-1.8.3-5.3.2\") ) flag++;\nif ( rpm_check(release:\"SUSE42.2\", cpu:\"x86_64\", reference:\"libgstrtp-1_0-0-32bit-1.8.3-5.3.2\") ) flag++;\nif ( rpm_check(release:\"SUSE42.2\", cpu:\"x86_64\", reference:\"libgstrtp-1_0-0-debuginfo-32bit-1.8.3-5.3.2\") ) flag++;\nif ( rpm_check(release:\"SUSE42.2\", cpu:\"x86_64\", reference:\"libgstrtsp-1_0-0-32bit-1.8.3-5.3.2\") ) flag++;\nif ( rpm_check(release:\"SUSE42.2\", cpu:\"x86_64\", reference:\"libgstrtsp-1_0-0-debuginfo-32bit-1.8.3-5.3.2\") ) flag++;\nif ( rpm_check(release:\"SUSE42.2\", cpu:\"x86_64\", reference:\"libgstsdp-1_0-0-32bit-1.8.3-5.3.2\") ) flag++;\nif ( rpm_check(release:\"SUSE42.2\", cpu:\"x86_64\", reference:\"libgstsdp-1_0-0-debuginfo-32bit-1.8.3-5.3.2\") ) flag++;\nif ( rpm_check(release:\"SUSE42.2\", cpu:\"x86_64\", reference:\"libgsttag-1_0-0-32bit-1.8.3-5.3.2\") ) flag++;\nif ( rpm_check(release:\"SUSE42.2\", cpu:\"x86_64\", reference:\"libgsttag-1_0-0-debuginfo-32bit-1.8.3-5.3.2\") ) flag++;\nif ( rpm_check(release:\"SUSE42.2\", cpu:\"x86_64\", reference:\"libgstvideo-1_0-0-32bit-1.8.3-5.3.2\") ) flag++;\nif ( rpm_check(release:\"SUSE42.2\", cpu:\"x86_64\", reference:\"libgstvideo-1_0-0-debuginfo-32bit-1.8.3-5.3.2\") ) flag++;\n\nif (flag)\n{\n if (report_verbosity > 0) security_warning(port:0, extra:rpm_report_get());\n else security_warning(0);\n exit(0);\n}\nelse\n{\n tested = pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"gstreamer-plugins-base / gstreamer-plugins-base-32bit / etc\");\n}\n", "cvss": {"score": 5.0, "vector": "AV:N/AC:L/Au:N/C:N/I:N/A:P"}}, {"lastseen": "2021-01-12T09:50:12", "description": "Hanno Boeck discovered multiple vulnerabilities in the GStreamer media\nframework and its codecs and demuxers, which may result in denial of\nservice or the execution of arbitrary code if a malformed media file\nis opened.", "edition": 23, "cvss3": {"score": 7.5, "vector": "AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}, "published": "2017-03-28T00:00:00", "title": "Debian DSA-3819-1 : gst-plugins-base1.0 - security update", "type": "nessus", "bulletinFamily": "scanner", "cvelist": ["CVE-2017-5844", "CVE-2017-5837", "CVE-2016-9811", "CVE-2017-5839", "CVE-2017-5842"], "modified": "2017-03-28T00:00:00", "cpe": ["p-cpe:/a:debian:debian_linux:gst-plugins-base1.0", "cpe:/o:debian:debian_linux:8.0"], "id": "DEBIAN_DSA-3819.NASL", "href": "https://www.tenable.com/plugins/nessus/99005", "sourceData": "#%NASL_MIN_LEVEL 70300\n#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were \n# extracted from Debian Security Advisory DSA-3819. The text \n# itself is copyright (C) Software in the Public Interest, Inc.\n#\n\ninclude('deprecated_nasl_level.inc');\ninclude('compat.inc');\n\nif (description)\n{\n script_id(99005);\n script_version(\"3.7\");\n script_set_attribute(attribute:\"plugin_modification_date\", value:\"2021/01/11\");\n\n script_cve_id(\"CVE-2016-9811\", \"CVE-2017-5837\", \"CVE-2017-5839\", \"CVE-2017-5842\", \"CVE-2017-5844\");\n script_xref(name:\"DSA\", value:\"3819\");\n\n script_name(english:\"Debian DSA-3819-1 : gst-plugins-base1.0 - security update\");\n script_summary(english:\"Checks dpkg output for the updated package\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote Debian host is missing a security-related update.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"Hanno Boeck discovered multiple vulnerabilities in the GStreamer media\nframework and its codecs and demuxers, which may result in denial of\nservice or the execution of arbitrary code if a malformed media file\nis opened.\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://packages.debian.org/source/jessie/gst-plugins-base1.0\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.debian.org/security/2017/dsa-3819\"\n );\n script_set_attribute(\n attribute:\"solution\", \n value:\n\"Upgrade the gst-plugins-base1.0 packages.\n\nFor the stable distribution (jessie), these problems have been fixed\nin version 1.4.4-2+deb8u1.\n\nFor the upcoming stable distribution (stretch), these problems have\nbeen fixed in version 1.10.4-1.\"\n );\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P\");\n script_set_cvss_temporal_vector(\"CVSS2#E:U/RL:OF/RC:C\");\n script_set_cvss3_base_vector(\"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\");\n script_set_cvss3_temporal_vector(\"CVSS:3.0/E:U/RL:O/RC:C\");\n script_set_attribute(attribute:\"exploitability_ease\", value:\"No known exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"false\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:debian:debian_linux:gst-plugins-base1.0\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:debian:debian_linux:8.0\");\n\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2017/03/27\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2017/03/28\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2017-2021 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n script_family(english:\"Debian Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/Debian/release\", \"Host/Debian/dpkg-l\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"debian_package.inc\");\n\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nif (!get_kb_item(\"Host/Debian/release\")) audit(AUDIT_OS_NOT, \"Debian\");\nif (!get_kb_item(\"Host/Debian/dpkg-l\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\n\nflag = 0;\nif (deb_check(release:\"8.0\", prefix:\"gir1.2-gst-plugins-base-1.0\", reference:\"1.4.4-2+deb8u1\")) flag++;\nif (deb_check(release:\"8.0\", prefix:\"gstreamer1.0-alsa\", reference:\"1.4.4-2+deb8u1\")) flag++;\nif (deb_check(release:\"8.0\", prefix:\"gstreamer1.0-plugins-base\", reference:\"1.4.4-2+deb8u1\")) flag++;\nif (deb_check(release:\"8.0\", prefix:\"gstreamer1.0-plugins-base-apps\", reference:\"1.4.4-2+deb8u1\")) flag++;\nif (deb_check(release:\"8.0\", prefix:\"gstreamer1.0-plugins-base-dbg\", reference:\"1.4.4-2+deb8u1\")) flag++;\nif (deb_check(release:\"8.0\", prefix:\"gstreamer1.0-plugins-base-doc\", reference:\"1.4.4-2+deb8u1\")) flag++;\nif (deb_check(release:\"8.0\", prefix:\"gstreamer1.0-x\", reference:\"1.4.4-2+deb8u1\")) flag++;\nif (deb_check(release:\"8.0\", prefix:\"libgstreamer-plugins-base1.0-0\", reference:\"1.4.4-2+deb8u1\")) flag++;\nif (deb_check(release:\"8.0\", prefix:\"libgstreamer-plugins-base1.0-dev\", reference:\"1.4.4-2+deb8u1\")) flag++;\n\nif (flag)\n{\n if (report_verbosity > 0) security_warning(port:0, extra:deb_report_get());\n else security_warning(0);\n exit(0);\n}\nelse audit(AUDIT_HOST_NOT, \"affected\");\n", "cvss": {"score": 5.0, "vector": "AV:N/AC:L/Au:N/C:N/I:N/A:P"}}, {"lastseen": "2021-01-01T06:44:51", "description": "Hanno Bock discovered that GStreamer Base Plugins did not correctly\nhandle certain malformed media files. If a user were tricked into\nopening a crafted media file with a GStreamer application, an attacker\ncould cause a denial of service via application crash.\n\nNote that Tenable Network Security has extracted the preceding\ndescription block directly from the Ubuntu security advisory. Tenable\nhas attempted to automatically clean and format it as much as possible\nwithout introducing additional issues.", "edition": 23, "cvss3": {"score": 7.5, "vector": "AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}, "published": "2017-03-28T00:00:00", "title": "Ubuntu 12.04 LTS / 14.04 LTS / 16.04 LTS / 16.10 : gst-plugins-base0.10, gst-plugins-base1.0 vulnerabilities (USN-3244-1)", "type": "nessus", "bulletinFamily": "scanner", "cvelist": ["CVE-2017-5844", "CVE-2017-5837", "CVE-2016-9811", "CVE-2017-5839", "CVE-2017-5842"], "modified": "2021-01-02T00:00:00", "cpe": ["p-cpe:/a:canonical:ubuntu_linux:gstreamer0.10-plugins-base", "cpe:/o:canonical:ubuntu_linux:16.04", "cpe:/o:canonical:ubuntu_linux:16.10", "p-cpe:/a:canonical:ubuntu_linux:gstreamer1.0-plugins-base", "cpe:/o:canonical:ubuntu_linux:12.04:-:lts", "cpe:/o:canonical:ubuntu_linux:14.04"], "id": "UBUNTU_USN-3244-1.NASL", "href": "https://www.tenable.com/plugins/nessus/99023", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were\n# extracted from Ubuntu Security Notice USN-3244-1. The text \n# itself is copyright (C) Canonical, Inc. See \n# <http://www.ubuntu.com/usn/>. Ubuntu(R) is a registered \n# trademark of Canonical, Inc.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(99023);\n script_version(\"3.3\");\n script_cvs_date(\"Date: 2019/09/18 12:31:46\");\n\n script_cve_id(\"CVE-2016-9811\", \"CVE-2017-5837\", \"CVE-2017-5839\", \"CVE-2017-5842\", \"CVE-2017-5844\");\n script_xref(name:\"USN\", value:\"3244-1\");\n\n script_name(english:\"Ubuntu 12.04 LTS / 14.04 LTS / 16.04 LTS / 16.10 : gst-plugins-base0.10, gst-plugins-base1.0 vulnerabilities (USN-3244-1)\");\n script_summary(english:\"Checks dpkg output for updated packages.\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\n\"The remote Ubuntu host is missing one or more security-related\npatches.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"Hanno Bock discovered that GStreamer Base Plugins did not correctly\nhandle certain malformed media files. If a user were tricked into\nopening a crafted media file with a GStreamer application, an attacker\ncould cause a denial of service via application crash.\n\nNote that Tenable Network Security has extracted the preceding\ndescription block directly from the Ubuntu security advisory. Tenable\nhas attempted to automatically clean and format it as much as possible\nwithout introducing additional issues.\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://usn.ubuntu.com/3244-1/\"\n );\n script_set_attribute(\n attribute:\"solution\", \n value:\n\"Update the affected gstreamer0.10-plugins-base and / or\ngstreamer1.0-plugins-base packages.\"\n );\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P\");\n script_set_cvss3_base_vector(\"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:canonical:ubuntu_linux:gstreamer0.10-plugins-base\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:canonical:ubuntu_linux:gstreamer1.0-plugins-base\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:canonical:ubuntu_linux:12.04:-:lts\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:canonical:ubuntu_linux:14.04\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:canonical:ubuntu_linux:16.04\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:canonical:ubuntu_linux:16.10\");\n\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2017/01/13\");\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2017/03/27\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2017/03/28\");\n script_set_attribute(attribute:\"generated_plugin\", value:\"current\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"Ubuntu Security Notice (C) 2017-2019 Canonical, Inc. / NASL script (C) 2017-2019 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n script_family(english:\"Ubuntu Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/cpu\", \"Host/Ubuntu\", \"Host/Ubuntu/release\", \"Host/Debian/dpkg-l\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"ubuntu.inc\");\ninclude(\"misc_func.inc\");\n\nif ( ! get_kb_item(\"Host/local_checks_enabled\") ) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nrelease = get_kb_item(\"Host/Ubuntu/release\");\nif ( isnull(release) ) audit(AUDIT_OS_NOT, \"Ubuntu\");\nrelease = chomp(release);\nif (! preg(pattern:\"^(12\\.04|14\\.04|16\\.04|16\\.10)$\", string:release)) audit(AUDIT_OS_NOT, \"Ubuntu 12.04 / 14.04 / 16.04 / 16.10\", \"Ubuntu \" + release);\nif ( ! get_kb_item(\"Host/Debian/dpkg-l\") ) audit(AUDIT_PACKAGE_LIST_MISSING);\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (\"x86_64\" >!< cpu && cpu !~ \"^i[3-6]86$\") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"Ubuntu\", cpu);\n\nflag = 0;\n\nif (ubuntu_check(osver:\"12.04\", pkgname:\"gstreamer0.10-plugins-base\", pkgver:\"0.10.36-1ubuntu0.2\")) flag++;\nif (ubuntu_check(osver:\"14.04\", pkgname:\"gstreamer0.10-plugins-base\", pkgver:\"0.10.36-1.1ubuntu2.1\")) flag++;\nif (ubuntu_check(osver:\"14.04\", pkgname:\"gstreamer1.0-plugins-base\", pkgver:\"1.2.4-1~ubuntu2.1\")) flag++;\nif (ubuntu_check(osver:\"16.04\", pkgname:\"gstreamer1.0-plugins-base\", pkgver:\"1.8.3-1ubuntu0.2\")) flag++;\nif (ubuntu_check(osver:\"16.10\", pkgname:\"gstreamer1.0-plugins-base\", pkgver:\"1.8.3-1ubuntu1.1\")) flag++;\n\nif (flag)\n{\n security_report_v4(\n port : 0,\n severity : SECURITY_WARNING,\n extra : ubuntu_report_get()\n );\n exit(0);\n}\nelse\n{\n tested = ubuntu_pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"gstreamer0.10-plugins-base / gstreamer1.0-plugins-base\");\n}\n", "cvss": {"score": 5.0, "vector": "AV:N/AC:L/Au:N/C:N/I:N/A:P"}}, {"lastseen": "2021-01-06T09:31:33", "description": "An update is now available for Red Hat Enterprise Linux 7.\n\nRed Hat Product Security has rated this update as having a security\nimpact of Moderate. A Common Vulnerability Scoring System (CVSS) base\nscore, which gives a detailed severity rating, is available for each\nvulnerability from the CVE link(s) in the References section.\n\nGStreamer is a streaming media framework based on graphs of filters\nwhich operate on media data.\n\nThe following packages have been upgraded to a later upstream version:\nclutter-gst2 (2.0.18), gnome-video-effects (0.4.3), gstreamer1\n(1.10.4), gstreamer1-plugins-bad-free (1.10.4),\ngstreamer1-plugins-base (1.10.4), gstreamer1-plugins-good (1.10.4),\norc (0.4.26).\n\nSecurity Fix(es) :\n\n* Multiple flaws were found in gstreamer1, gstreamer1-plugins-base,\ngstreamer1-plugins-good, and gstreamer1-plugins-bad-free packages. An\nattacker could potentially use these flaws to crash applications which\nuse the GStreamer framework. (CVE-2016-9446, CVE-2016-9810,\nCVE-2016-9811, CVE-2016-10198, CVE-2016-10199, CVE-2017-5837,\nCVE-2017-5838, CVE-2017-5839, CVE-2017-5840, CVE-2017-5841,\nCVE-2017-5842, CVE-2017-5843, CVE-2017-5844, CVE-2017-5845,\nCVE-2017-5848)\n\nAdditional Changes :\n\nFor detailed information on changes in this release, see the Red Hat\nEnterprise Linux 7.4 Release Notes linked from the References section.", "edition": 27, "cvss3": {"score": 7.5, "vector": "AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}, "published": "2017-08-25T00:00:00", "title": "CentOS 7 : clutter-gst2 / gnome-video-effects / gstreamer-plugins-bad-free / etcgstreamer1 / etc (CESA-2017:2060)", "type": "nessus", "bulletinFamily": "scanner", "cvelist": ["CVE-2016-9446", "CVE-2016-9810", "CVE-2017-5844", "CVE-2016-10198", "CVE-2017-5837", "CVE-2016-10199", "CVE-2017-5840", "CVE-2017-5843", "CVE-2016-9811", "CVE-2017-5839", "CVE-2017-5842", "CVE-2017-5841", "CVE-2017-5845", "CVE-2017-5838", "CVE-2017-5848"], "modified": "2017-08-25T00:00:00", "cpe": ["p-cpe:/a:centos:centos:gstreamer1-devel-docs", "p-cpe:/a:centos:centos:gstreamer1-plugins-base", "p-cpe:/a:centos:centos:gstreamer-plugins-good-devel-docs", "p-cpe:/a:centos:centos:gstreamer-plugins-bad-free-devel", "p-cpe:/a:centos:centos:orc-devel", "p-cpe:/a:centos:centos:clutter-gst2", "p-cpe:/a:centos:centos:gstreamer1-plugins-bad-free-devel", "cpe:/o:centos:centos:7", "p-cpe:/a:centos:centos:gstreamer1-plugins-good", "p-cpe:/a:centos:centos:gstreamer1-plugins-base-devel-docs", "p-cpe:/a:centos:centos:gnome-video-effects", "p-cpe:/a:centos:centos:gstreamer1-plugins-base-tools", "p-cpe:/a:centos:centos:gstreamer1-plugins-base-devel", "p-cpe:/a:centos:centos:gstreamer-plugins-good", "p-cpe:/a:centos:centos:orc", "p-cpe:/a:centos:centos:gstreamer1-devel", "p-cpe:/a:centos:centos:gstreamer-plugins-bad-free", "p-cpe:/a:centos:centos:gstreamer1", "p-cpe:/a:centos:centos:orc-compiler", "p-cpe:/a:centos:centos:gstreamer-plugins-bad-free-devel-docs", "p-cpe:/a:centos:centos:clutter-gst2-devel", "p-cpe:/a:centos:centos:gstreamer1-plugins-bad-free-gtk", "p-cpe:/a:centos:centos:orc-doc", "p-cpe:/a:centos:centos:gstreamer1-plugins-bad-free"], "id": "CENTOS_RHSA-2017-2060.NASL", "href": "https://www.tenable.com/plugins/nessus/102752", "sourceData": "#%NASL_MIN_LEVEL 70300\n#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were \n# extracted from Red Hat Security Advisory RHSA-2017:2060 and \n# CentOS Errata and Security Advisory 2017:2060 respectively.\n#\n\ninclude('deprecated_nasl_level.inc');\ninclude('compat.inc');\n\nif (description)\n{\n script_id(102752);\n script_version(\"3.8\");\n script_set_attribute(attribute:\"plugin_modification_date\", value:\"2021/01/04\");\n\n script_cve_id(\"CVE-2016-10198\", \"CVE-2016-10199\", \"CVE-2016-9446\", \"CVE-2016-9810\", \"CVE-2016-9811\", \"CVE-2017-5837\", \"CVE-2017-5838\", \"CVE-2017-5839\", \"CVE-2017-5840\", \"CVE-2017-5841\", \"CVE-2017-5842\", \"CVE-2017-5843\", \"CVE-2017-5844\", \"CVE-2017-5845\", \"CVE-2017-5848\");\n script_xref(name:\"RHSA\", value:\"2017:2060\");\n\n script_name(english:\"CentOS 7 : clutter-gst2 / gnome-video-effects / gstreamer-plugins-bad-free / etcgstreamer1 / etc (CESA-2017:2060)\");\n script_summary(english:\"Checks rpm output for the updated packages\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote CentOS host is missing one or more security updates.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"An update is now available for Red Hat Enterprise Linux 7.\n\nRed Hat Product Security has rated this update as having a security\nimpact of Moderate. A Common Vulnerability Scoring System (CVSS) base\nscore, which gives a detailed severity rating, is available for each\nvulnerability from the CVE link(s) in the References section.\n\nGStreamer is a streaming media framework based on graphs of filters\nwhich operate on media data.\n\nThe following packages have been upgraded to a later upstream version:\nclutter-gst2 (2.0.18), gnome-video-effects (0.4.3), gstreamer1\n(1.10.4), gstreamer1-plugins-bad-free (1.10.4),\ngstreamer1-plugins-base (1.10.4), gstreamer1-plugins-good (1.10.4),\norc (0.4.26).\n\nSecurity Fix(es) :\n\n* Multiple flaws were found in gstreamer1, gstreamer1-plugins-base,\ngstreamer1-plugins-good, and gstreamer1-plugins-bad-free packages. An\nattacker could potentially use these flaws to crash applications which\nuse the GStreamer framework. (CVE-2016-9446, CVE-2016-9810,\nCVE-2016-9811, CVE-2016-10198, CVE-2016-10199, CVE-2017-5837,\nCVE-2017-5838, CVE-2017-5839, CVE-2017-5840, CVE-2017-5841,\nCVE-2017-5842, CVE-2017-5843, CVE-2017-5844, CVE-2017-5845,\nCVE-2017-5848)\n\nAdditional Changes :\n\nFor detailed information on changes in this release, see the Red Hat\nEnterprise Linux 7.4 Release Notes linked from the References section.\"\n );\n # https://lists.centos.org/pipermail/centos-cr-announce/2017-August/004037.html\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://www.nessus.org/u?bf60fc6c\"\n );\n # https://lists.centos.org/pipermail/centos-cr-announce/2017-August/004174.html\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://www.nessus.org/u?548b2c59\"\n );\n # https://lists.centos.org/pipermail/centos-cr-announce/2017-August/004194.html\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://www.nessus.org/u?40bff417\"\n );\n # https://lists.centos.org/pipermail/centos-cr-announce/2017-August/004195.html\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://www.nessus.org/u?ea8f519e\"\n );\n # https://lists.centos.org/pipermail/centos-cr-announce/2017-August/004196.html\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://www.nessus.org/u?ae48cf6e\"\n );\n # https://lists.centos.org/pipermail/centos-cr-announce/2017-August/004197.html\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://www.nessus.org/u?d5da3bda\"\n );\n # https://lists.centos.org/pipermail/centos-cr-announce/2017-August/004198.html\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://www.nessus.org/u?778c2007\"\n );\n # https://lists.centos.org/pipermail/centos-cr-announce/2017-August/004199.html\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://www.nessus.org/u?ca48ae06\"\n );\n # https://lists.centos.org/pipermail/centos-cr-announce/2017-August/004423.html\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://www.nessus.org/u?fd9b4b9b\"\n );\n script_set_attribute(attribute:\"solution\", value:\"Update the affected packages.\");\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P\");\n script_set_cvss_temporal_vector(\"CVSS2#E:U/RL:OF/RC:C\");\n script_set_cvss3_base_vector(\"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\");\n script_set_cvss3_temporal_vector(\"CVSS:3.0/E:U/RL:O/RC:C\");\n script_set_attribute(attribute:\"cvss_score_source\", value:\"CVE-2016-10199\");\n script_set_attribute(attribute:\"exploitability_ease\", value:\"No known exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"false\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:clutter-gst2\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:clutter-gst2-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:gnome-video-effects\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:gstreamer-plugins-bad-free\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:gstreamer-plugins-bad-free-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:gstreamer-plugins-bad-free-devel-docs\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:gstreamer-plugins-good\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:gstreamer-plugins-good-devel-docs\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:gstreamer1\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:gstreamer1-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:gstreamer1-devel-docs\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:gstreamer1-plugins-bad-free\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:gstreamer1-plugins-bad-free-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:gstreamer1-plugins-bad-free-gtk\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:gstreamer1-plugins-base\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:gstreamer1-plugins-base-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:gstreamer1-plugins-base-devel-docs\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:gstreamer1-plugins-base-tools\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:gstreamer1-plugins-good\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:orc\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:orc-compiler\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:orc-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:orc-doc\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:centos:centos:7\");\n\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2017/01/13\");\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2017/08/23\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2017/08/25\");\n script_set_attribute(attribute:\"generated_plugin\", value:\"current\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2017-2021 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n script_family(english:\"CentOS Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/CentOS/release\", \"Host/CentOS/rpm-list\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"rpm.inc\");\n\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nrelease = get_kb_item(\"Host/CentOS/release\");\nif (isnull(release) || \"CentOS\" >!< release) audit(AUDIT_OS_NOT, \"CentOS\");\nos_ver = pregmatch(pattern: \"CentOS(?: Linux)? release ([0-9]+)\", string:release);\nif (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, \"CentOS\");\nos_ver = os_ver[1];\nif (! preg(pattern:\"^7([^0-9]|$)\", string:os_ver)) audit(AUDIT_OS_NOT, \"CentOS 7.x\", \"CentOS \" + os_ver);\n\nif (!get_kb_item(\"Host/CentOS/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (\"x86_64\" >!< cpu && cpu !~ \"^i[3-6]86$\") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"CentOS\", cpu);\n\n\nflag = 0;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"clutter-gst2-2.0.18-1.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"clutter-gst2-devel-2.0.18-1.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"gnome-video-effects-0.4.3-1.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"gstreamer-plugins-bad-free-0.10.23-23.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"gstreamer-plugins-bad-free-devel-0.10.23-23.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"gstreamer-plugins-bad-free-devel-docs-0.10.23-23.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"gstreamer-plugins-good-0.10.31-13.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"gstreamer-plugins-good-devel-docs-0.10.31-13.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"gstreamer1-1.10.4-2.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"gstreamer1-devel-1.10.4-2.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"gstreamer1-devel-docs-1.10.4-2.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"gstreamer1-plugins-bad-free-1.10.4-2.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"gstreamer1-plugins-bad-free-devel-1.10.4-2.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"gstreamer1-plugins-bad-free-gtk-1.10.4-2.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"gstreamer1-plugins-base-1.10.4-1.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"gstreamer1-plugins-base-devel-1.10.4-1.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"gstreamer1-plugins-base-devel-docs-1.10.4-1.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"gstreamer1-plugins-base-tools-1.10.4-1.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"gstreamer1-plugins-good-1.10.4-2.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"orc-0.4.26-1.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"orc-compiler-0.4.26-1.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"orc-devel-0.4.26-1.el7\")) flag++;\nif (rpm_check(release:\"CentOS-7\", cpu:\"x86_64\", reference:\"orc-doc-0.4.26-1.el7\")) flag++;\n\n\nif (flag)\n{\n cr_plugin_caveat = '\\n' +\n 'NOTE: The security advisory associated with this vulnerability has a\\n' +\n 'fixed package version that may only be available in the continuous\\n' +\n 'release (CR) repository for CentOS, until it is present in the next\\n' +\n 'point release of CentOS.\\n\\n' +\n\n 'If an equal or higher package level does not exist in the baseline\\n' +\n 'repository for your major version of CentOS, then updates from the CR\\n' +\n 'repository will need to be applied in order to address the\\n' +\n 'vulnerability.\\n';\n security_report_v4(\n port : 0,\n severity : SECURITY_WARNING,\n extra : rpm_report_get() + cr_plugin_caveat\n );\n exit(0);\n}\nelse\n{\n tested = pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"clutter-gst2 / clutter-gst2-devel / gnome-video-effects / etc\");\n}\n", "cvss": {"score": 5.0, "vector": "AV:N/AC:L/Au:N/C:N/I:N/A:P"}}, {"lastseen": "2021-01-01T05:08:15", "description": "An update is now available for Red Hat Enterprise Linux 7.\n\nRed Hat Product Security has rated this update as having a security\nimpact of Moderate. A Common Vulnerability Scoring System (CVSS) base\nscore, which gives a detailed severity rating, is available for each\nvulnerability from the CVE link(s) in the References section.\n\nGStreamer is a streaming media framework based on graphs of filters\nwhich operate on media data.\n\nThe following packages have been upgraded to a later upstream version:\nclutter-gst2 (2.0.18), gnome-video-effects (0.4.3), gstreamer1\n(1.10.4), gstreamer1-plugins-bad-free (1.10.4),\ngstreamer1-plugins-base (1.10.4), gstreamer1-plugins-good (1.10.4),\norc (0.4.26).\n\nSecurity Fix(es) :\n\n* Multiple flaws were found in gstreamer1, gstreamer1-plugins-base,\ngstreamer1-plugins-good, and gstreamer1-plugins-bad-free packages. An\nattacker could potentially use these flaws to crash applications which\nuse the GStreamer framework. (CVE-2016-9446, CVE-2016-9810,\nCVE-2016-9811, CVE-2016-10198, CVE-2016-10199, CVE-2017-5837,\nCVE-2017-5838, CVE-2017-5839, CVE-2017-5840, CVE-2017-5841,\nCVE-2017-5842, CVE-2017-5843, CVE-2017-5844, CVE-2017-5845,\nCVE-2017-5848)\n\nAdditional Changes :\n\nFor detailed information on changes in this release, see the Red Hat\nEnterprise Linux 7.4 Release Notes linked from the References section.", "edition": 31, "cvss3": {"score": 7.5, "vector": "AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}, "published": "2017-08-03T00:00:00", "title": "RHEL 7 : GStreamer (RHSA-2017:2060)", "type": "nessus", "bulletinFamily": "scanner", "cvelist": ["CVE-2016-9446", "CVE-2016-9810", "CVE-2017-5844", "CVE-2016-10198", "CVE-2017-5837", "CVE-2016-10199", "CVE-2017-5840", "CVE-2017-5843", "CVE-2016-9811", "CVE-2017-5839", "CVE-2017-5842", "CVE-2017-5841", "CVE-2017-5845", "CVE-2017-5838", "CVE-2017-5848"], "modified": "2021-01-02T00:00:00", "cpe": ["p-cpe:/a:redhat:enterprise_linux:gstreamer-plugins-good-debuginfo", "p-cpe:/a:redhat:enterprise_linux:orc", "p-cpe:/a:redhat:enterprise_linux:gstreamer-plugins-good", "p-cpe:/a:redhat:enterprise_linux:gstreamer-plugins-good-devel-docs", "p-cpe:/a:redhat:enterprise_linux:gstreamer1", "p-cpe:/a:redhat:enterprise_linux:gstreamer-plugins-bad-free-devel-docs", "p-cpe:/a:redhat:enterprise_linux:gstreamer1-plugins-bad-free-devel", "cpe:/o:redhat:enterprise_linux:7.4", "p-cpe:/a:redhat:enterprise_linux:gstreamer-plugins-bad-free-devel", "p-cpe:/a:redhat:enterprise_linux:gstreamer1-plugins-bad-free-gtk", "p-cpe:/a:redhat:enterprise_linux:orc-compiler", "p-cpe:/a:redhat:enterprise_linux:gstreamer1-devel", "p-cpe:/a:redhat:enterprise_linux:orc-doc", "p-cpe:/a:redhat:enterprise_linux:gstreamer1-plugins-base-devel", "p-cpe:/a:redhat:enterprise_linux:gstreamer1-plugins-bad-free", "p-cpe:/a:redhat:enterprise_linux:gstreamer1-plugins-good", "p-cpe:/a:redhat:enterprise_linux:gstreamer1-plugins-bad-free-debuginfo", "cpe:/o:redhat:enterprise_linux:7.7", "p-cpe:/a:redhat:enterprise_linux:clutter-gst2-devel", "cpe:/o:redhat:enterprise_linux:7.5", "p-cpe:/a:redhat:enterprise_linux:gstreamer-plugins-bad-free", "cpe:/o:redhat:enterprise_linux:7", "p-cpe:/a:redhat:enterprise_linux:gstreamer1-plugins-base", "p-cpe:/a:redhat:enterprise_linux:gstreamer-plugins-bad-free-debuginfo", "p-cpe:/a:redhat:enterprise_linux:gstreamer1-debuginfo", "p-cpe:/a:redhat:enterprise_linux:clutter-gst2", "p-cpe:/a:redhat:enterprise_linux:gstreamer1-plugins-good-debuginfo", "p-cpe:/a:redhat:enterprise_linux:gstreamer1-plugins-base-debuginfo", "p-cpe:/a:redhat:enterprise_linux:gstreamer1-plugins-base-tools", "p-cpe:/a:redhat:enterprise_linux:orc-debuginfo", "p-cpe:/a:redhat:enterprise_linux:gstreamer1-devel-docs", "cpe:/o:redhat:enterprise_linux:7.6", "p-cpe:/a:redhat:enterprise_linux:gstreamer1-plugins-base-devel-docs", "p-cpe:/a:redhat:enterprise_linux:clutter-gst2-debuginfo", "p-cpe:/a:redhat:enterprise_linux:orc-devel", "p-cpe:/a:redhat:enterprise_linux:gnome-video-effects"], "id": "REDHAT-RHSA-2017-2060.NASL", "href": "https://www.tenable.com/plugins/nessus/102150", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were \n# extracted from Red Hat Security Advisory RHSA-2017:2060. The text \n# itself is copyright (C) Red Hat, Inc.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(102150);\n script_version(\"3.12\");\n script_cvs_date(\"Date: 2019/10/24 15:35:43\");\n\n script_cve_id(\"CVE-2016-10198\", \"CVE-2016-10199\", \"CVE-2016-9446\", \"CVE-2016-9810\", \"CVE-2016-9811\", \"CVE-2017-5837\", \"CVE-2017-5838\", \"CVE-2017-5839\", \"CVE-2017-5840\", \"CVE-2017-5841\", \"CVE-2017-5842\", \"CVE-2017-5843\", \"CVE-2017-5844\", \"CVE-2017-5845\", \"CVE-2017-5848\");\n script_xref(name:\"RHSA\", value:\"2017:2060\");\n\n script_name(english:\"RHEL 7 : GStreamer (RHSA-2017:2060)\");\n script_summary(english:\"Checks the rpm output for the updated packages\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote Red Hat host is missing one or more security updates.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"An update is now available for Red Hat Enterprise Linux 7.\n\nRed Hat Product Security has rated this update as having a security\nimpact of Moderate. A Common Vulnerability Scoring System (CVSS) base\nscore, which gives a detailed severity rating, is available for each\nvulnerability from the CVE link(s) in the References section.\n\nGStreamer is a streaming media framework based on graphs of filters\nwhich operate on media data.\n\nThe following packages have been upgraded to a later upstream version:\nclutter-gst2 (2.0.18), gnome-video-effects (0.4.3), gstreamer1\n(1.10.4), gstreamer1-plugins-bad-free (1.10.4),\ngstreamer1-plugins-base (1.10.4), gstreamer1-plugins-good (1.10.4),\norc (0.4.26).\n\nSecurity Fix(es) :\n\n* Multiple flaws were found in gstreamer1, gstreamer1-plugins-base,\ngstreamer1-plugins-good, and gstreamer1-plugins-bad-free packages. An\nattacker could potentially use these flaws to crash applications which\nuse the GStreamer framework. (CVE-2016-9446, CVE-2016-9810,\nCVE-2016-9811, CVE-2016-10198, CVE-2016-10199, CVE-2017-5837,\nCVE-2017-5838, CVE-2017-5839, CVE-2017-5840, CVE-2017-5841,\nCVE-2017-5842, CVE-2017-5843, CVE-2017-5844, CVE-2017-5845,\nCVE-2017-5848)\n\nAdditional Changes :\n\nFor detailed information on changes in this release, see the Red Hat\nEnterprise Linux 7.4 Release Notes linked from the References section.\"\n );\n # https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://www.nessus.org/u?3395ff0b\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/errata/RHSA-2017:2060\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2016-10198\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2016-10199\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2016-9446\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2016-9810\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2016-9811\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2017-5837\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2017-5838\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2017-5839\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2017-5840\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2017-5841\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2017-5842\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2017-5843\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2017-5844\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2017-5845\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2017-5848\"\n );\n script_set_attribute(attribute:\"solution\", value:\"Update the affected packages.\");\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P\");\n script_set_cvss_temporal_vector(\"CVSS2#E:U/RL:OF/RC:C\");\n script_set_cvss3_base_vector(\"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\");\n script_set_cvss3_temporal_vector(\"CVSS:3.0/E:U/RL:O/RC:C\");\n script_set_attribute(attribute:\"exploitability_ease\", value:\"No known exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"false\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:clutter-gst2\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:clutter-gst2-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:clutter-gst2-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:gnome-video-effects\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:gstreamer-plugins-bad-free\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:gstreamer-plugins-bad-free-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:gstreamer-plugins-bad-free-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:gstreamer-plugins-bad-free-devel-docs\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:gstreamer-plugins-good\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:gstreamer-plugins-good-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:gstreamer-plugins-good-devel-docs\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:gstreamer1\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:gstreamer1-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:gstreamer1-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:gstreamer1-devel-docs\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:gstreamer1-plugins-bad-free\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:gstreamer1-plugins-bad-free-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:gstreamer1-plugins-bad-free-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:gstreamer1-plugins-bad-free-gtk\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:gstreamer1-plugins-base\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:gstreamer1-plugins-base-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:gstreamer1-plugins-base-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:gstreamer1-plugins-base-devel-docs\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:gstreamer1-plugins-base-tools\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:gstreamer1-plugins-good\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:gstreamer1-plugins-good-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:orc\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:orc-compiler\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:orc-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:orc-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:orc-doc\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:redhat:enterprise_linux:7\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:redhat:enterprise_linux:7.4\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:redhat:enterprise_linux:7.5\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:redhat:enterprise_linux:7.6\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:redhat:enterprise_linux:7.7\");\n\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2017/01/13\");\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2017/08/01\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2017/08/03\");\n script_set_attribute(attribute:\"generated_plugin\", value:\"current\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2017-2019 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n script_family(english:\"Red Hat Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/RedHat/release\", \"Host/RedHat/rpm-list\", \"Host/cpu\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"misc_func.inc\");\ninclude(\"rpm.inc\");\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nrelease = get_kb_item(\"Host/RedHat/release\");\nif (isnull(release) || \"Red Hat\" >!< release) audit(AUDIT_OS_NOT, \"Red Hat\");\nos_ver = pregmatch(pattern: \"Red Hat Enterprise Linux.*release ([0-9]+(\\.[0-9]+)?)\", string:release);\nif (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, \"Red Hat\");\nos_ver = os_ver[1];\nif (! preg(pattern:\"^7([^0-9]|$)\", string:os_ver)) audit(AUDIT_OS_NOT, \"Red Hat 7.x\", \"Red Hat \" + os_ver);\n\nif (!get_kb_item(\"Host/RedHat/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (\"x86_64\" >!< cpu && cpu !~ \"^i[3-6]86$\" && \"s390\" >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"Red Hat\", cpu);\n\nyum_updateinfo = get_kb_item(\"Host/RedHat/yum-updateinfo\");\nif (!empty_or_null(yum_updateinfo)) \n{\n rhsa = \"RHSA-2017:2060\";\n yum_report = redhat_generate_yum_updateinfo_report(rhsa:rhsa);\n if (!empty_or_null(yum_report))\n {\n security_report_v4(\n port : 0,\n severity : SECURITY_WARNING,\n extra : yum_report \n );\n exit(0);\n }\n else\n {\n audit_message = \"affected by Red Hat security advisory \" + rhsa;\n audit(AUDIT_OS_NOT, audit_message);\n }\n}\nelse\n{\n flag = 0;\n if (rpm_check(release:\"RHEL7\", reference:\"clutter-gst2-2.0.18-1.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", reference:\"clutter-gst2-debuginfo-2.0.18-1.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", reference:\"clutter-gst2-devel-2.0.18-1.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", reference:\"gnome-video-effects-0.4.3-1.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", reference:\"gstreamer-plugins-bad-free-0.10.23-23.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", reference:\"gstreamer-plugins-bad-free-debuginfo-0.10.23-23.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", reference:\"gstreamer-plugins-bad-free-devel-0.10.23-23.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"s390x\", reference:\"gstreamer-plugins-bad-free-devel-docs-0.10.23-23.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"x86_64\", reference:\"gstreamer-plugins-bad-free-devel-docs-0.10.23-23.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", reference:\"gstreamer-plugins-good-0.10.31-13.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", reference:\"gstreamer-plugins-good-debuginfo-0.10.31-13.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", reference:\"gstreamer-plugins-good-devel-docs-0.10.31-13.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", reference:\"gstreamer1-1.10.4-2.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", reference:\"gstreamer1-debuginfo-1.10.4-2.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", reference:\"gstreamer1-devel-1.10.4-2.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", reference:\"gstreamer1-devel-docs-1.10.4-2.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", reference:\"gstreamer1-plugins-bad-free-1.10.4-2.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", reference:\"gstreamer1-plugins-bad-free-debuginfo-1.10.4-2.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", reference:\"gstreamer1-plugins-bad-free-devel-1.10.4-2.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", reference:\"gstreamer1-plugins-bad-free-gtk-1.10.4-2.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", reference:\"gstreamer1-plugins-base-1.10.4-1.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", reference:\"gstreamer1-plugins-base-debuginfo-1.10.4-1.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", reference:\"gstreamer1-plugins-base-devel-1.10.4-1.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", reference:\"gstreamer1-plugins-base-devel-docs-1.10.4-1.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"s390x\", reference:\"gstreamer1-plugins-base-tools-1.10.4-1.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"x86_64\", reference:\"gstreamer1-plugins-base-tools-1.10.4-1.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", reference:\"gstreamer1-plugins-good-1.10.4-2.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", reference:\"gstreamer1-plugins-good-debuginfo-1.10.4-2.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", reference:\"orc-0.4.26-1.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"s390x\", reference:\"orc-compiler-0.4.26-1.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", cpu:\"x86_64\", reference:\"orc-compiler-0.4.26-1.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", reference:\"orc-debuginfo-0.4.26-1.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", reference:\"orc-devel-0.4.26-1.el7\")) flag++;\n\n if (rpm_check(release:\"RHEL7\", reference:\"orc-doc-0.4.26-1.el7\")) flag++;\n\n\n if (flag)\n {\n security_report_v4(\n port : 0,\n severity : SECURITY_WARNING,\n extra : rpm_report_get() + redhat_report_package_caveat()\n );\n exit(0);\n }\n else\n {\n tested = pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"clutter-gst2 / clutter-gst2-debuginfo / clutter-gst2-devel / etc\");\n }\n}\n", "cvss": {"score": 5.0, "vector": "AV:N/AC:L/Au:N/C:N/I:N/A:P"}}, {"lastseen": "2021-01-07T08:52:31", "description": "According to the versions of the gstreamer packages installed, the\nEulerOS installation on the remote host is affected by the following\nvulnerabilities :\n\n - Multiple flaws were found in gstreamer1,\n gstreamer1-plugins-base, gstreamer1-plugins-good, and\n gstreamer1-plugins-bad-free packages. An attacker could\n potentially use these flaws to crash applications which\n use the GStreamer framework. (CVE-2016-9446,\n CVE-2016-9810, CVE-2016-9811, CVE-2016-10198,\n CVE-2016-10199, CVE-2017-5837, CVE-2017-5838,\n CVE-2017-5839, CVE-2017-5840, CVE-2017-5841,\n CVE-2017-5842, CVE-2017-5843, CVE-2017-5844,\n CVE-2017-5845, CVE-2017-5848)\n\nNote that Tenable Network Security has extracted the preceding\ndescription block directly from the EulerOS security advisory. Tenable\nhas attempted to automatically clean and format it as much as possible\nwithout introducing additional issues.", "edition": 82, "cvss3": {"score": 7.5, "vector": "AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"}, "published": "2017-09-11T00:00:00", "title": "EulerOS 2.0 SP2 : gstreamer (EulerOS-SA-2017-1206)", "type": "nessus", "bulletinFamily": "scanner", "cvelist": ["CVE-2016-9446", "CVE-2016-9810", "CVE-2017-5844", "CVE-2016-10198", "CVE-2017-5837", "CVE-2016-10199", "CVE-2017-5840", "CVE-2017-5843", "CVE-2016-9811", "CVE-2017-5839", "CVE-2017-5842", "CVE-2017-5841", "CVE-2017-5845", "CVE-2017-5838", "CVE-2017-5848"], "modified": "2017-09-11T00:00:00", "cpe": ["p-cpe:/a:huawei:euleros:gstreamer1-plugins-bad-free", "p-cpe:/a:huawei:euleros:gstreamer1", "p-cpe:/a:huawei:euleros:gstreamer1-devel", "p-cpe:/a:huawei:euleros:gstreamer1-plugins-good", "p-cpe:/a:huawei:euleros:gstreamer1-plugins-base-devel", "p-cpe:/a:huawei:euleros:gstreamer1-plugins-base", "cpe:/o:huawei:euleros:2.0"], "id": "EULEROS_SA-2017-1206.NASL", "href": "https://www.tenable.com/plugins/nessus/103064", "sourceData": "#%NASL_MIN_LEVEL 70300\n#\n# (C) Tenable Network Security, Inc.\n#\n\ninclude('deprecated_nasl_level.inc');\ninclude('compat.inc');\n\nif (description)\n{\n script_id(103064);\n script_version(\"3.80\");\n script_set_attribute(attribute:\"plugin_modification_date\", value:\"2021/01/06\");\n\n script_cve_id(\n \"CVE-2016-10198\",\n \"CVE-2016-10199\",\n \"CVE-2016-9446\",\n \"CVE-2016-9810\",\n \"CVE-2016-9811\",\n \"CVE-2017-5837\",\n \"CVE-2017-5838\",\n \"CVE-2017-5839\",\n \"CVE-2017-5840\",\n \"CVE-2017-5841\",\n \"CVE-2017-5842\",\n \"CVE-2017-5843\",\n \"CVE-2017-5844\",\n \"CVE-2017-5845\",\n \"CVE-2017-5848\"\n );\n\n script_name(english:\"EulerOS 2.0 SP2 : gstreamer (EulerOS-SA-2017-1206)\");\n script_summary(english:\"Checks the rpm output for the updated packages.\");\n\n script_set_attribute(attribute:\"synopsis\", value:\n\"The remote EulerOS host is missing multiple security updates.\");\n script_set_attribute(attribute:\"description\", value:\n\"According to the versions of the gstreamer packages installed, the\nEulerOS installation on the remote host is affected by the following\nvulnerabilities :\n\n - Multiple flaws were found in gstreamer1,\n gstreamer1-plugins-base, gstreamer1-plugins-good, and\n gstreamer1-plugins-bad-free packages. An attacker could\n potentially use these flaws to crash applications which\n use the GStreamer framework. (CVE-2016-9446,\n CVE-2016-9810, CVE-2016-9811, CVE-2016-10198,\n CVE-2016-10199, CVE-2017-5837, CVE-2017-5838,\n CVE-2017-5839, CVE-2017-5840, CVE-2017-5841,\n CVE-2017-5842, CVE-2017-5843, CVE-2017-5844,\n CVE-2017-5845, CVE-2017-5848)\n\nNote that Tenable Network Security has extracted the preceding\ndescription block directly from the EulerOS security advisory. Tenable\nhas attempted to automatically clean and format it as much as possible\nwithout introducing additional issues.\");\n # https://developer.huaweicloud.com/ict/en/site-euleros/euleros/security-advisories/EulerOS-SA-2017-1206\n script_set_attribute(attribute:\"see_also\", value:\"http://www.nessus.org/u?688399e1\");\n script_set_attribute(attribute:\"solution\", value:\n\"Update the affected gstreamer packages.\");\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:N\");\n script_set_cvss_temporal_vector(\"CVSS2#E:U/RL:OF/RC:C\");\n script_set_cvss3_base_vector(\"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N\");\n script_set_cvss3_temporal_vector(\"CVSS:3.0/E:U/RL:O/RC:C\");\n\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2017/08/25\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2017/09/11\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:huawei:euleros:gstreamer1\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:huawei:euleros:gstreamer1-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:huawei:euleros:gstreamer1-plugins-bad-free\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:huawei:euleros:gstreamer1-plugins-base\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:huawei:euleros:gstreamer1-plugins-base-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:huawei:euleros:gstreamer1-plugins-good\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:huawei:euleros:2.0\");\n script_set_attribute(attribute:\"generated_plugin\", value:\"current\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_family(english:\"Huawei Local Security Checks\");\n\n script_copyright(english:\"This script is Copyright (C) 2017-2021 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/EulerOS/release\", \"Host/EulerOS/rpm-list\", \"Host/EulerOS/sp\");\n script_exclude_keys(\"Host/EulerOS/uvp_version\");\n\n exit(0);\n}\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"rpm.inc\");\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\n\nrelease = get_kb_item(\"Host/EulerOS/release\");\nif (isnull(release) || release !~ \"^EulerOS\") audit(AUDIT_OS_NOT, \"EulerOS\");\nif (release !~ \"^EulerOS release 2\\.0(\\D|$)\") audit(AUDIT_OS_NOT, \"EulerOS 2.0\");\n\nsp = get_kb_item(\"Host/EulerOS/sp\");\nif (isnull(sp) || sp !~ \"^(2)$\") audit(AUDIT_OS_NOT, \"EulerOS 2.0 SP2\");\n\nuvp = get_kb_item(\"Host/EulerOS/uvp_version\");\nif (!empty_or_null(uvp)) audit(AUDIT_OS_NOT, \"EulerOS 2.0 SP2\", \"EulerOS UVP \" + uvp);\n\nif (!get_kb_item(\"Host/EulerOS/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (\"x86_64\" >!< cpu && cpu !~ \"^i[3-6]86$\" && \"aarch64\" >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"EulerOS\", cpu);\nif (\"x86_64\" >!< cpu && cpu !~ \"^i[3-6]86$\") audit(AUDIT_ARCH_NOT, \"i686 / x86_64\", cpu);\n\nflag = 0;\n\npkgs = [\"gstreamer1-1.10.4-2\",\n \"gstreamer1-devel-1.10.4-2\",\n \"gstreamer1-plugins-bad-free-1.10.4-2\",\n \"gstreamer1-plugins-base-1.10.4-1\",\n \"gstreamer1-plugins-base-devel-1.10.4-1\",\n \"gstreamer1-plugins-good-1.10.4-2\"];\n\nforeach (pkg in pkgs)\n if (rpm_check(release:\"EulerOS-2.0\", sp:\"2\", reference:pkg)) flag++;\n\nif (flag)\n{\n security_report_v4(\n port : 0,\n severity : SECURITY_WARNING,\n extra : rpm_report_get()\n );\n exit(0);\n}\nelse\n{\n tested = pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"gstreamer\");\n}\n", "cvss": {"score": 5.0, "vector": "AV:N/AC:L/Au:N/C:P/I:N/A:N"}}], "archlinux": [{"lastseen": "2020-09-22T18:36:44", "bulletinFamily": "unix", "cvelist": ["CVE-2017-5837", "CVE-2017-5839", "CVE-2017-5842", "CVE-2017-5844"], "description": "Arch Linux Security Advisory ASA-201702-4\n=========================================\n\nSeverity: Critical\nDate : 2017-02-03\nCVE-ID : CVE-2017-5837 CVE-2017-5839 CVE-2017-5842 CVE-2017-5844\nPackage : gst-plugins-base-libs\nType : multiple issues\nRemote : Yes\nLink : https://security.archlinux.org/AVG-164\n\nSummary\n=======\n\nThe package gst-plugins-base-libs before version 1.10.3-1 is vulnerable\nto multiple issues including arbitrary code execution and denial of\nservice.\n\nResolution\n==========\n\nUpgrade to 1.10.3-1.\n\n# pacman -Syu \"gst-plugins-base-libs>=1.10.3-1\"\n\nThe problems have been fixed upstream in version 1.10.3.\n\nWorkaround\n==========\n\nNone.\n\nDescription\n===========\n\n- CVE-2017-5837 (denial of service)\n\nA floating point exception issue has been found in gstreamer before\n1.10.3, in gst_riff_create_audio_caps.\n\n- CVE-2017-5839 (denial of service)\n\nAn endless recursion issue leading to stack overflow has been found in\ngstreamer before 1.10.3, in gst_riff_create_audio_caps.\n\n- CVE-2017-5842 (arbitrary code execution)\n\nAn off-by-one write has been found in gstreamer before 1.10.3, in\nhtml_context_handle_element.\n\n- CVE-2017-5844 (denial of service)\n\nA floating point exception issue has been found in gstreamer before\n1.10.3, in gst_riff_create_audio_caps.\n\nImpact\n======\n\nA remote attacker can crash gstreamer or execute arbitrary code on the\naffected host via a crafted file.\n\nReferences\n==========\n\nhttp://seclists.org/oss-sec/2017/q1/284\nhttps://bugzilla.gnome.org/show_bug.cgi?id=777262\nhttps://bugzilla.gnome.org/show_bug.cgi?id=777265\nhttps://bugzilla.gnome.org/show_bug.cgi?id=777502\nhttps://bugzilla.gnome.org/show_bug.cgi?id=777525\nhttps://security.archlinux.org/CVE-2017-5837\nhttps://security.archlinux.org/CVE-2017-5839\nhttps://security.archlinux.org/CVE-2017-5842\nhttps://security.archlinux.org/CVE-2017-5844", "modified": "2017-02-03T00:00:00", "published": "2017-02-03T00:00:00", "id": "ASA-201702-4", "href": "https://security.archlinux.org/ASA-201702-4", "type": "archlinux", "title": "[ASA-201702-4] gst-plugins-base-libs: multiple issues", "cvss": {"score": 5.0, "vector": "AV:N/AC:L/Au:N/C:N/I:N/A:P"}}], "openvas": [{"lastseen": "2019-05-29T18:34:14", "bulletinFamily": "scanner", "cvelist": ["CVE-2017-5844", "CVE-2017-5837", "CVE-2017-5839", "CVE-2017-5842"], "description": "The remote host is missing an update for the ", "modified": "2019-03-15T00:00:00", "published": "2017-02-21T00:00:00", "id": "OPENVAS:1361412562310872389", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310872389", "type": "openvas", "title": "Fedora Update for mingw-gstreamer1-plugins-base FEDORA-2017-a56d78acb8", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n#\n# Fedora Update for mingw-gstreamer1-plugins-base FEDORA-2017-a56d78acb8\n#\n# Authors:\n# System Generated Check\n#\n# Copyright:\n# Copyright (C) 2017 Greenbone Networks GmbH, http://www.greenbone.net\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.872389\");\n script_version(\"$Revision: 14223 $\");\n script_tag(name:\"last_modification\", value:\"$Date: 2019-03-15 14:49:35 +0100 (Fri, 15 Mar 2019) $\");\n script_tag(name:\"creation_date\", value:\"2017-02-21 05:51:50 +0100 (Tue, 21 Feb 2017)\");\n script_cve_id(\"CVE-2017-5837\", \"CVE-2017-5839\", \"CVE-2017-5842\", \"CVE-2017-5844\");\n script_tag(name:\"cvss_base\", value:\"5.0\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:L/Au:N/C:N/I:N/A:P\");\n script_tag(name:\"qod_type\", value:\"package\");\n script_name(\"Fedora Update for mingw-gstreamer1-plugins-base FEDORA-2017-a56d78acb8\");\n script_tag(name:\"summary\", value:\"The remote host is missing an update for the 'mingw-gstreamer1-plugins-base'\n package(s) announced via the referenced advisory.\");\n script_tag(name:\"vuldetect\", value:\"Checks if a vulnerable version is present on the target host.\");\n script_tag(name:\"affected\", value:\"mingw-gstreamer1-plugins-base on Fedora 25\");\n script_tag(name:\"solution\", value:\"Please install the updated package(s).\");\n script_xref(name:\"FEDORA\", value:\"2017-a56d78acb8\");\n script_xref(name:\"URL\", value:\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/H2JEFQZSQL6WSZY2RZYGBJMXRQOA43K3\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (C) 2017 Greenbone Networks GmbH\");\n script_family(\"Fedora Local Security Checks\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/fedora\", \"ssh/login/rpms\", re:\"ssh/login/release=FC25\");\n\n exit(0);\n}\n\ninclude(\"revisions-lib.inc\");\ninclude(\"pkg-lib-rpm.inc\");\n\nrelease = rpm_get_ssh_release();\nif(!release)\n exit(0);\n\nres = \"\";\n\nif(release == \"FC25\")\n{\n\n if ((res = isrpmvuln(pkg:\"mingw-gstreamer1-plugins-base\", rpm:\"mingw-gstreamer1-plugins-base~1.10.3~1.fc25\", rls:\"FC25\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if (__pkg_match) exit(99);\n exit(0);\n}", "cvss": {"score": 5.0, "vector": "AV:N/AC:L/Au:N/C:N/I:N/A:P"}}, {"lastseen": "2019-05-29T18:34:07", "bulletinFamily": "scanner", "cvelist": ["CVE-2017-5844", "CVE-2017-5837", "CVE-2016-9811", "CVE-2017-5839", "CVE-2017-5842"], "description": "Hanno Boeck discovered multiple vulnerabilities in the GStreamer media\nframework and its codecs and demuxers, which may result in denial of\nservice or the execution of arbitrary code if a malformed media file is\nopened.", "modified": "2019-03-18T00:00:00", "published": "2017-03-27T00:00:00", "id": "OPENVAS:1361412562310703819", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310703819", "type": "openvas", "title": "Debian Security Advisory DSA 3819-1 (gst-plugins-base1.0 - security update)", "sourceData": "# OpenVAS Vulnerability Test\n# $Id: deb_3819.nasl 14275 2019-03-18 14:39:45Z cfischer $\n# Auto-generated from advisory DSA 3819-1 using nvtgen 1.0\n# Script version: 1.0\n#\n# Author:\n# Greenbone Networks\n#\n# Copyright:\n# Copyright (c) 2017 Greenbone Networks GmbH http://greenbone.net\n# Text descriptions are largely excerpted from the referenced\n# advisory, and are Copyright (c) the respective author(s)\n#\n# This program is free software; you can redistribute it and/or\n# modify it under the terms of the GNU General Public License\n# as published by the Free Software Foundation; either version 2\n# of the License, or (at your option) any later version.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n#\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.703819\");\n script_version(\"$Revision: 14275 $\");\n script_cve_id(\"CVE-2016-9811\", \"CVE-2017-5837\", \"CVE-2017-5839\", \"CVE-2017-5842\", \"CVE-2017-5844\");\n script_name(\"Debian Security Advisory DSA 3819-1 (gst-plugins-base1.0 - security update)\");\n script_tag(name:\"last_modification\", value:\"$Date: 2019-03-18 15:39:45 +0100 (Mon, 18 Mar 2019) $\");\n script_tag(name:\"creation_date\", value:\"2017-03-27 00:00:00 +0200 (Mon, 27 Mar 2017)\");\n script_tag(name:\"cvss_base\", value:\"5.0\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:L/Au:N/C:N/I:N/A:P\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n script_tag(name:\"qod_type\", value:\"package\");\n\n script_xref(name:\"URL\", value:\"http://www.debian.org/security/2017/dsa-3819.html\");\n\n script_category(ACT_GATHER_INFO);\n\n script_copyright(\"Copyright (c) 2017 Greenbone Networks GmbH http://greenbone.net\");\n script_family(\"Debian Local Security Checks\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/debian_linux\", \"ssh/login/packages\", re:\"ssh/login/release=DEB(8|9)\");\n script_tag(name:\"affected\", value:\"gst-plugins-base1.0 on Debian Linux\");\n script_tag(name:\"solution\", value:\"For the stable distribution (jessie), these problems have been fixed in\nversion 1.4.4-2+deb8u1.\n\nFor the upcoming stable distribution (stretch), these problems have been\nfixed in version 1.10.4-1.\n\nFor the unstable distribution (sid), these problems have been fixed in\nversion 1.10.4-1.\n\nWe recommend that you upgrade your gst-plugins-base1.0 packages.\");\n script_tag(name:\"summary\", value:\"Hanno Boeck discovered multiple vulnerabilities in the GStreamer media\nframework and its codecs and demuxers, which may result in denial of\nservice or the execution of arbitrary code if a malformed media file is\nopened.\");\n script_tag(name:\"vuldetect\", value:\"This check tests the installed software version using the apt package manager.\");\n\n exit(0);\n}\n\ninclude(\"revisions-lib.inc\");\ninclude(\"pkg-lib-deb.inc\");\n\nres = \"\";\nreport = \"\";\nif((res = isdpkgvuln(pkg:\"gir1.2-gst-plugins-base-1.0\", ver:\"1.4.4-2+deb8u1\", rls:\"DEB8\")) != NULL) {\n report += res;\n}\nif((res = isdpkgvuln(pkg:\"gstreamer1.0-alsa:amd64\", ver:\"1.4.4-2+deb8u1\", rls:\"DEB8\")) != NULL) {\n report += res;\n}\nif((res = isdpkgvuln(pkg:\"gstreamer1.0-alsa:i386\", ver:\"1.4.4-2+deb8u1\", rls:\"DEB8\")) != NULL) {\n report += res;\n}\nif((res = isdpkgvuln(pkg:\"gstreamer1.0-plugins-base:amd64\", ver:\"1.4.4-2+deb8u1\", rls:\"DEB8\")) != NULL) {\n report += res;\n}\nif((res = isdpkgvuln(pkg:\"gstreamer1.0-plugins-base:i386\", ver:\"1.4.4-2+deb8u1\", rls:\"DEB8\")) != NULL) {\n report += res;\n}\nif((res = isdpkgvuln(pkg:\"gstreamer1.0-plugins-base-apps\", ver:\"1.4.4-2+deb8u1\", rls:\"DEB8\")) != NULL) {\n report += res;\n}\nif((res = isdpkgvuln(pkg:\"gstreamer1.0-plugins-base-dbg:amd64\", ver:\"1.4.4-2+deb8u1\", rls:\"DEB8\")) != NULL) {\n report += res;\n}\nif((res = isdpkgvuln(pkg:\"gstreamer1.0-plugins-base-dbg:i386\", ver:\"1.4.4-2+deb8u1\", rls:\"DEB8\")) != NULL) {\n report += res;\n}\nif((res = isdpkgvuln(pkg:\"gstreamer1.0-plugins-base-doc\", ver:\"1.4.4-2+deb8u1\", rls:\"DEB8\")) != NULL) {\n report += res;\n}\nif((res = isdpkgvuln(pkg:\"gstreamer1.0-x:amd64\", ver:\"1.4.4-2+deb8u1\", rls:\"DEB8\")) != NULL) {\n report += res;\n}\nif((res = isdpkgvuln(pkg:\"gstreamer1.0-x:i386\", ver:\"1.4.4-2+deb8u1\", rls:\"DEB8\")) != NULL) {\n report += res;\n}\nif((res = isdpkgvuln(pkg:\"libgstreamer-plugins-base1.0-0:amd64\", ver:\"1.4.4-2+deb8u1\", rls:\"DEB8\")) != NULL) {\n report += res;\n}\nif((res = isdpkgvuln(pkg:\"libgstreamer-plugins-base1.0-0:i386\", ver:\"1.4.4-2+deb8u1\", rls:\"DEB8\")) != NULL) {\n report += res;\n}\nif((res = isdpkgvuln(pkg:\"libgstreamer-plugins-base1.0-dev\", ver:\"1.4.4-2+deb8u1\", rls:\"DEB8\")) != NULL) {\n report += res;\n}\nif((res = isdpkgvuln(pkg:\"gir1.2-gst-plugins-base-1.0\", ver:\"1.10.4-1\", rls:\"DEB9\")) != NULL) {\n report += res;\n}\nif((res = isdpkgvuln(pkg:\"gstreamer1.0-alsa:amd64\", ver:\"1.10.4-1\", rls:\"DEB9\")) != NULL) {\n report += res;\n}\nif((res = isdpkgvuln(pkg:\"gstreamer1.0-alsa:i386\", ver:\"1.10.4-1\", rls:\"DEB9\")) != NULL) {\n report += res;\n}\nif((res = isdpkgvuln(pkg:\"gstreamer1.0-plugins-base:amd64\", ver:\"1.10.4-1\", rls:\"DEB9\")) != NULL) {\n report += res;\n}\nif((res = isdpkgvuln(pkg:\"gstreamer1.0-plugins-base:i386\", ver:\"1.10.4-1\", rls:\"DEB9\")) != NULL) {\n report += res;\n}\nif((res = isdpkgvuln(pkg:\"gstreamer1.0-plugins-base-apps\", ver:\"1.10.4-1\", rls:\"DEB9\")) != NULL) {\n report += res;\n}\nif((res = isdpkgvuln(pkg:\"gstreamer1.0-plugins-base-dbg:amd64\", ver:\"1.10.4-1\", rls:\"DEB9\")) != NULL) {\n report += res;\n}\nif((res = isdpkgvuln(pkg:\"gstreamer1.0-plugins-base-dbg:i386\", ver:\"1.10.4-1\", rls:\"DEB9\")) != NULL) {\n report += res;\n}\nif((res = isdpkgvuln(pkg:\"gstreamer1.0-plugins-base-doc\", ver:\"1.10.4-1\", rls:\"DEB9\")) != NULL) {\n report += res;\n}\nif((res = isdpkgvuln(pkg:\"gstreamer1.0-x:amd64\", ver:\"1.10.4-1\", rls:\"DEB9\")) != NULL) {\n report += res;\n}\nif((res = isdpkgvuln(pkg:\"gstreamer1.0-x:i386\", ver:\"1.10.4-1\", rls:\"DEB9\")) != NULL) {\n report += res;\n}\nif((res = isdpkgvuln(pkg:\"libgstreamer-plugins-base1.0-0:amd64\", ver:\"1.10.4-1\", rls:\"DEB9\")) != NULL) {\n report += res;\n}\nif((res = isdpkgvuln(pkg:\"libgstreamer-plugins-base1.0-0:i386\", ver:\"1.10.4-1\", rls:\"DEB9\")) != NULL) {\n report += res;\n}\nif((res = isdpkgvuln(pkg:\"libgstreamer-plugins-base1.0-dev\", ver:\"1.10.4-1\", rls:\"DEB9\")) != NULL) {\n report += res;\n}\n\nif(report != \"\") {\n security_message(data:report);\n} else if(__pkg_match) {\n exit(99);\n}", "cvss": {"score": 5.0, "vector": "AV:N/AC:L/Au:N/C:N/I:N/A:P"}}, {"lastseen": "2019-05-29T18:34:37", "bulletinFamily": "scanner", "cvelist": ["CVE-2017-5844", "CVE-2017-5837", "CVE-2016-9811", "CVE-2017-5839", "CVE-2017-5842"], "description": "The remote host is missing an update for the ", "modified": "2019-03-13T00:00:00", "published": "2017-03-28T00:00:00", "id": "OPENVAS:1361412562310843111", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310843111", "type": "openvas", "title": "Ubuntu Update for gst-plugins-base1.0 USN-3244-1", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n#\n# Ubuntu Update for gst-plugins-base1.0 USN-3244-1\n#\n# Authors:\n# System Generated Check\n#\n# Copyright:\n# Copyright (C) 2017 Greenbone Networks GmbH, http://www.greenbone.net\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.843111\");\n script_version(\"$Revision: 14140 $\");\n script_tag(name:\"last_modification\", value:\"$Date: 2019-03-13 13:26:09 +0100 (Wed, 13 Mar 2019) $\");\n script_tag(name:\"creation_date\", value:\"2017-03-28 06:30:00 +0200 (Tue, 28 Mar 2017)\");\n script_cve_id(\"CVE-2016-9811\", \"CVE-2017-5837\", \"CVE-2017-5839\", \"CVE-2017-5842\",\n \"CVE-2017-5844\");\n script_tag(name:\"cvss_base\", value:\"5.0\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:L/Au:N/C:N/I:N/A:P\");\n script_tag(name:\"qod_type\", value:\"package\");\n script_name(\"Ubuntu Update for gst-plugins-base1.0 USN-3244-1\");\n script_tag(name:\"summary\", value:\"The remote host is missing an update for the 'gst-plugins-base1.0'\n package(s) announced via the referenced advisory.\");\n script_tag(name:\"vuldetect\", value:\"Checks if a vulnerable version is present on the target host.\");\n script_tag(name:\"insight\", value:\"Hanno B&#246 ck discovered that GStreamer\n Base Plugins did not correctly handle certain malformed media files. If a user\n were tricked into opening a crafted media file with a GStreamer application, an\n attacker could cause a denial of service via application crash.\");\n script_tag(name:\"affected\", value:\"gst-plugins-base1.0 on Ubuntu 16.10,\n Ubuntu 16.04 LTS,\n Ubuntu 14.04 LTS,\n Ubuntu 12.04 LTS\");\n script_tag(name:\"solution\", value:\"Please Install the Updated Packages.\");\n\n script_xref(name:\"USN\", value:\"3244-1\");\n script_xref(name:\"URL\", value:\"http://www.ubuntu.com/usn/usn-3244-1/\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (C) 2017 Greenbone Networks GmbH\");\n script_family(\"Ubuntu Local Security Checks\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/ubuntu_linux\", \"ssh/login/packages\", re:\"ssh/login/release=UBUNTU(14\\.04 LTS|16\\.10|12\\.04 LTS|16\\.04 LTS)\");\n\n exit(0);\n}\n\ninclude(\"revisions-lib.inc\");\ninclude(\"pkg-lib-deb.inc\");\n\nrelease = dpkg_get_ssh_release();\nif(!release)\n exit(0);\n\nres = \"\";\n\nif(release == \"UBUNTU14.04 LTS\")\n{\n\n if ((res = isdpkgvuln(pkg:\"gstreamer0.10-plugins-base\", ver:\"0.10.36-1.1ubuntu2.1\", rls:\"UBUNTU14.04 LTS\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isdpkgvuln(pkg:\"gstreamer1.0-plugins-base\", ver:\"1.2.4-1~ubuntu2.1\", rls:\"UBUNTU14.04 LTS\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if (__pkg_match) exit(99);\n exit(0);\n}\n\n\nif(release == \"UBUNTU16.10\")\n{\n\n if ((res = isdpkgvuln(pkg:\"gstreamer1.0-plugins-base\", ver:\"1.8.3-1ubuntu1.1\", rls:\"UBUNTU16.10\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if (__pkg_match) exit(99);\n exit(0);\n}\n\n\nif(release == \"UBUNTU12.04 LTS\")\n{\n\n if ((res = isdpkgvuln(pkg:\"gstreamer0.10-plugins-base\", ver:\"0.10.36-1ubuntu0.2\", rls:\"UBUNTU12.04 LTS\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if (__pkg_match) exit(99);\n exit(0);\n}\n\n\nif(release == \"UBUNTU16.04 LTS\")\n{\n\n if ((res = isdpkgvuln(pkg:\"gstreamer1.0-plugins-base\", ver:\"1.8.3-1ubuntu0.2\", rls:\"UBUNTU16.04 LTS\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if (__pkg_match) exit(99);\n exit(0);\n}", "cvss": {"score": 5.0, "vector": "AV:N/AC:L/Au:N/C:N/I:N/A:P"}}, {"lastseen": "2017-07-24T12:57:37", "bulletinFamily": "scanner", "cvelist": ["CVE-2017-5844", "CVE-2017-5837", "CVE-2016-9811", "CVE-2017-5839", "CVE-2017-5842"], "description": "Hanno Boeck discovered multiple vulnerabilities in the GStreamer media\nframework and its codecs and demuxers, which may result in denial of\nservice or the execution of arbitrary code if a malformed media file is\nopened.", "modified": "2017-07-07T00:00:00", "published": "2017-03-27T00:00:00", "id": "OPENVAS:703819", "href": "http://plugins.openvas.org/nasl.php?oid=703819", "type": "openvas", "title": "Debian Security Advisory DSA 3819-1 (gst-plugins-base1.0 - security update)", "sourceData": "# OpenVAS Vulnerability Test\n# $Id: deb_3819.nasl 6607 2017-07-07 12:04:25Z cfischer $\n# Auto-generated from advisory DSA 3819-1 using nvtgen 1.0\n# Script version: 1.0\n#\n# Author:\n# Greenbone Networks\n#\n# Copyright:\n# Copyright (c) 2017 Greenbone Networks GmbH http://greenbone.net\n# Text descriptions are largely excerpted from the referenced\n# advisory, and are Copyright (c) the respective author(s)\n#\n# This program is free software; you can redistribute it and/or\n# modify it under the terms of the GNU General Public License\n# as published by the Free Software Foundation; either version 2\n# of the License, or (at your option) any later version.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n#\n\n\nif(description)\n{\n script_id(703819);\n script_version(\"$Revision: 6607 $\");\n script_cve_id(\"CVE-2016-9811\", \"CVE-2017-5837\", \"CVE-2017-5839\", \"CVE-2017-5842\", \"CVE-2017-5844\");\n script_name(\"Debian Security Advisory DSA 3819-1 (gst-plugins-base1.0 - security update)\");\n script_tag(name: \"last_modification\", value: \"$Date: 2017-07-07 14:04:25 +0200 (Fri, 07 Jul 2017) $\");\n script_tag(name: \"creation_date\", value: \"2017-03-27 00:00:00 +0200 (Mon, 27 Mar 2017)\");\n script_tag(name:\"cvss_base\", value:\"5.0\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:L/Au:N/C:N/I:N/A:P\");\n script_tag(name: \"solution_type\", value: \"VendorFix\");\n script_tag(name: \"qod_type\", value: \"package\");\n\n script_xref(name: \"URL\", value: \"http://www.debian.org/security/2017/dsa-3819.html\");\n\n script_category(ACT_GATHER_INFO);\n\n script_copyright(\"Copyright (c) 2017 Greenbone Networks GmbH http://greenbone.net\");\n script_family(\"Debian Local Security Checks\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/debian_linux\", \"ssh/login/packages\");\n script_tag(name: \"affected\", value: \"gst-plugins-base1.0 on Debian Linux\");\n script_tag(name: \"solution\", value: \"For the stable distribution (jessie), these problems have been fixed in\nversion 1.4.4-2+deb8u1.\n\nFor the upcoming stable distribution (stretch), these problems have been\nfixed in version 1.10.4-1.\n\nFor the unstable distribution (sid), these problems have been fixed in\nversion 1.10.4-1.\n\nWe recommend that you upgrade your gst-plugins-base1.0 packages.\");\n script_tag(name: \"summary\", value: \"Hanno Boeck discovered multiple vulnerabilities in the GStreamer media\nframework and its codecs and demuxers, which may result in denial of\nservice or the execution of arbitrary code if a malformed media file is\nopened.\");\n script_tag(name: \"vuldetect\", value: \"This check tests the installed software version using the apt package manager.\");\n\n exit(0);\n}\n\ninclude(\"revisions-lib.inc\");\ninclude(\"pkg-lib-deb.inc\");\n\nres = \"\";\nreport = \"\";\nif ((res = isdpkgvuln(pkg:\"gir1.2-gst-plugins-base-1.0\", ver:\"1.4.4-2+deb8u1\", rls_regex:\"DEB8.[0-9]+\")) != NULL) {\n report += res;\n}\nif ((res = isdpkgvuln(pkg:\"gstreamer1.0-alsa:amd64\", ver:\"1.4.4-2+deb8u1\", rls_regex:\"DEB8.[0-9]+\")) != NULL) {\n report += res;\n}\nif ((res = isdpkgvuln(pkg:\"gstreamer1.0-alsa:i386\", ver:\"1.4.4-2+deb8u1\", rls_regex:\"DEB8.[0-9]+\")) != NULL) {\n report += res;\n}\nif ((res = isdpkgvuln(pkg:\"gstreamer1.0-plugins-base:amd64\", ver:\"1.4.4-2+deb8u1\", rls_regex:\"DEB8.[0-9]+\")) != NULL) {\n report += res;\n}\nif ((res = isdpkgvuln(pkg:\"gstreamer1.0-plugins-base:i386\", ver:\"1.4.4-2+deb8u1\", rls_regex:\"DEB8.[0-9]+\")) != NULL) {\n report += res;\n}\nif ((res = isdpkgvuln(pkg:\"gstreamer1.0-plugins-base-apps\", ver:\"1.4.4-2+deb8u1\", rls_regex:\"DEB8.[0-9]+\")) != NULL) {\n report += res;\n}\nif ((res = isdpkgvuln(pkg:\"gstreamer1.0-plugins-base-dbg:amd64\", ver:\"1.4.4-2+deb8u1\", rls_regex:\"DEB8.[0-9]+\")) != NULL) {\n report += res;\n}\nif ((res = isdpkgvuln(pkg:\"gstreamer1.0-plugins-base-dbg:i386\", ver:\"1.4.4-2+deb8u1\", rls_regex:\"DEB8.[0-9]+\")) != NULL) {\n report += res;\n}\nif ((res = isdpkgvuln(pkg:\"gstreamer1.0-plugins-base-doc\", ver:\"1.4.4-2+deb8u1\", rls_regex:\"DEB8.[0-9]+\")) != NULL) {\n report += res;\n}\nif ((res = isdpkgvuln(pkg:\"gstreamer1.0-x:amd64\", ver:\"1.4.4-2+deb8u1\", rls_regex:\"DEB8.[0-9]+\")) != NULL) {\n report += res;\n}\nif ((res = isdpkgvuln(pkg:\"gstreamer1.0-x:i386\", ver:\"1.4.4-2+deb8u1\", rls_regex:\"DEB8.[0-9]+\")) != NULL) {\n report += res;\n}\nif ((res = isdpkgvuln(pkg:\"libgstreamer-plugins-base1.0-0:amd64\", ver:\"1.4.4-2+deb8u1\", rls_regex:\"DEB8.[0-9]+\")) != NULL) {\n report += res;\n}\nif ((res = isdpkgvuln(pkg:\"libgstreamer-plugins-base1.0-0:i386\", ver:\"1.4.4-2+deb8u1\", rls_regex:\"DEB8.[0-9]+\")) != NULL) {\n report += res;\n}\nif ((res = isdpkgvuln(pkg:\"libgstreamer-plugins-base1.0-dev\", ver:\"1.4.4-2+deb8u1\", rls_regex:\"DEB8.[0-9]+\")) != NULL) {\n report += res;\n}\nif ((res = isdpkgvuln(pkg:\"gir1.2-gst-plugins-base-1.0\", ver:\"1.10.4-1\", rls_regex:\"DEB9.[0-9]+\")) != NULL) {\n report += res;\n}\nif ((res = isdpkgvuln(pkg:\"gstreamer1.0-alsa:amd64\", ver:\"1.10.4-1\", rls_regex:\"DEB9.[0-9]+\")) != NULL) {\n report += res;\n}\nif ((res = isdpkgvuln(pkg:\"gstreamer1.0-alsa:i386\", ver:\"1.10.4-1\", rls_regex:\"DEB9.[0-9]+\")) != NULL) {\n report += res;\n}\nif ((res = isdpkgvuln(pkg:\"gstreamer1.0-plugins-base:amd64\", ver:\"1.10.4-1\", rls_regex:\"DEB9.[0-9]+\")) != NULL) {\n report += res;\n}\nif ((res = isdpkgvuln(pkg:\"gstreamer1.0-plugins-base:i386\", ver:\"1.10.4-1\", rls_regex:\"DEB9.[0-9]+\")) != NULL) {\n report += res;\n}\nif ((res = isdpkgvuln(pkg:\"gstreamer1.0-plugins-base-apps\", ver:\"1.10.4-1\", rls_regex:\"DEB9.[0-9]+\")) != NULL) {\n report += res;\n}\nif ((res = isdpkgvuln(pkg:\"gstreamer1.0-plugins-base-dbg:amd64\", ver:\"1.10.4-1\", rls_regex:\"DEB9.[0-9]+\")) != NULL) {\n report += res;\n}\nif ((res = isdpkgvuln(pkg:\"gstreamer1.0-plugins-base-dbg:i386\", ver:\"1.10.4-1\", rls_regex:\"DEB9.[0-9]+\")) != NULL) {\n report += res;\n}\nif ((res = isdpkgvuln(pkg:\"gstreamer1.0-plugins-base-doc\", ver:\"1.10.4-1\", rls_regex:\"DEB9.[0-9]+\")) != NULL) {\n report += res;\n}\nif ((res = isdpkgvuln(pkg:\"gstreamer1.0-x:amd64\", ver:\"1.10.4-1\", rls_regex:\"DEB9.[0-9]+\")) != NULL) {\n report += res;\n}\nif ((res = isdpkgvuln(pkg:\"gstreamer1.0-x:i386\", ver:\"1.10.4-1\", rls_regex:\"DEB9.[0-9]+\")) != NULL) {\n report += res;\n}\nif ((res = isdpkgvuln(pkg:\"libgstreamer-plugins-base1.0-0:amd64\", ver:\"1.10.4-1\", rls_regex:\"DEB9.[0-9]+\")) != NULL) {\n report += res;\n}\nif ((res = isdpkgvuln(pkg:\"libgstreamer-plugins-base1.0-0:i386\", ver:\"1.10.4-1\", rls_regex:\"DEB9.[0-9]+\")) != NULL) {\n report += res;\n}\nif ((res = isdpkgvuln(pkg:\"libgstreamer-plugins-base1.0-dev\", ver:\"1.10.4-1\", rls_regex:\"DEB9.[0-9]+\")) != NULL) {\n report += res;\n}\n\nif (report != \"\") {\n security_message(data:report);\n} else if (__pkg_match) {\n exit(99); # Not vulnerable.\n}\n", "cvss": {"score": 5.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:NONE/I:NONE/A:PARTIAL/"}}, {"lastseen": "2020-01-27T18:36:30", "bulletinFamily": "scanner", "cvelist": ["CVE-2016-9446", "CVE-2016-9810", "CVE-2017-5844", "CVE-2016-10198", "CVE-2017-5837", "CVE-2016-10199", "CVE-2017-5840", "CVE-2017-5843", "CVE-2016-9811", "CVE-2017-5839", "CVE-2017-5842", "CVE-2017-5841", "CVE-2017-5845", "CVE-2017-5838", "CVE-2017-5848"], "description": "The remote host is missing an update for the Huawei EulerOS\n ", "modified": "2020-01-23T00:00:00", "published": "2020-01-23T00:00:00", "id": "OPENVAS:1361412562311220171206", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562311220171206", "type": "openvas", "title": "Huawei EulerOS: Security Advisory for gstreamer (EulerOS-SA-2017-1206)", "sourceData": "# Copyright (C) 2020 Greenbone Networks GmbH\n# Text descriptions are largely excerpted from the referenced\n# advisory, and are Copyright (C) the respective author(s)\n#\n# SPDX-License-Identifier: GPL-2.0-or-later\n#\n# This program is free software; you can redistribute it and/or\n# modify it under the terms of the GNU General Public License\n# as published by the Free Software Foundation; either version 2\n# of the License, or (at your option) any later version.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.1.2.2017.1206\");\n script_version(\"2020-01-23T10:58:40+0000\");\n script_cve_id(\"CVE-2016-10198\", \"CVE-2016-10199\", \"CVE-2016-9446\", \"CVE-2016-9810\", \"CVE-2016-9811\", \"CVE-2017-5837\", \"CVE-2017-5838\", \"CVE-2017-5839\", \"CVE-2017-5840\", \"CVE-2017-5841\", \"CVE-2017-5842\", \"CVE-2017-5843\", \"CVE-2017-5844\", \"CVE-2017-5845\", \"CVE-2017-5848\");\n script_tag(name:\"cvss_base\", value:\"5.0\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:L/Au:N/C:N/I:N/A:P\");\n script_tag(name:\"last_modification\", value:\"2020-01-23 10:58:40 +0000 (Thu, 23 Jan 2020)\");\n script_tag(name:\"creation_date\", value:\"2020-01-23 10:58:40 +0000 (Thu, 23 Jan 2020)\");\n script_name(\"Huawei EulerOS: Security Advisory for gstreamer (EulerOS-SA-2017-1206)\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (C) 2020 Greenbone Networks GmbH\");\n script_family(\"Huawei EulerOS Local Security Checks\");\n script_dependencies(\"gb_huawei_euleros_consolidation.nasl\");\n script_mandatory_keys(\"ssh/login/euleros\", \"ssh/login/rpms\", re:\"ssh/login/release=EULEROS-2\\.0SP2\");\n\n script_xref(name:\"EulerOS-SA\", value:\"2017-1206\");\n script_xref(name:\"URL\", value:\"https://developer.huaweicloud.com/ict/en/site-euleros/euleros/security-advisories/EulerOS-SA-2017-1206\");\n\n script_tag(name:\"summary\", value:\"The remote host is missing an update for the Huawei EulerOS\n 'gstreamer' package(s) announced via the EulerOS-SA-2017-1206 advisory.\");\n\n script_tag(name:\"vuldetect\", value:\"Checks if a vulnerable package version is present on the target host.\");\n\n script_tag(name:\"insight\", value:\"Multiple flaws were found in gstreamer1, gstreamer1-plugins-base, gstreamer1-plugins-good, and gstreamer1-plugins-bad-free packages. An attacker could potentially use these flaws to crash applications which use the GStreamer framework. (CVE-2016-9446, CVE-2016-9810, CVE-2016-9811, CVE-2016-10198, CVE-2016-10199, CVE-2017-5837, CVE-2017-5838, CVE-2017-5839, CVE-2017-5840, CVE-2017-5841, CVE-2017-5842, CVE-2017-5843, CVE-2017-5844, CVE-2017-5845, CVE-2017-5848)\");\n\n script_tag(name:\"affected\", value:\"'gstreamer' package(s) on Huawei EulerOS V2.0SP2.\");\n\n script_tag(name:\"solution\", value:\"Please install the updated package(s).\");\n\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n script_tag(name:\"qod_type\", value:\"package\");\n\n exit(0);\n}\n\ninclude(\"revisions-lib.inc\");\ninclude(\"pkg-lib-rpm.inc\");\n\nrelease = rpm_get_ssh_release();\nif(!release)\n exit(0);\n\nres = \"\";\nreport = \"\";\n\nif(release == \"EULEROS-2.0SP2\") {\n\n if(!isnull(res = isrpmvuln(pkg:\"gstreamer1\", rpm:\"gstreamer1~1.10.4~2\", rls:\"EULEROS-2.0SP2\"))) {\n report += res;\n }\n\n if(!isnull(res = isrpmvuln(pkg:\"gstreamer1-devel\", rpm:\"gstreamer1-devel~1.10.4~2\", rls:\"EULEROS-2.0SP2\"))) {\n report += res;\n }\n\n if(!isnull(res = isrpmvuln(pkg:\"gstreamer1-plugins-base\", rpm:\"gstreamer1-plugins-base~1.10.4~1\", rls:\"EULEROS-2.0SP2\"))) {\n report += res;\n }\n\n if(!isnull(res = isrpmvuln(pkg:\"gstreamer1-plugins-base-devel\", rpm:\"gstreamer1-plugins-base-devel~1.10.4~1\", rls:\"EULEROS-2.0SP2\"))) {\n report += res;\n }\n\n if(!isnull(res = isrpmvuln(pkg:\"gstreamer1-plugins-good\", rpm:\"gstreamer1-plugins-good~1.10.4~2\", rls:\"EULEROS-2.0SP2\"))) {\n report += res;\n }\n\n if(!isnull(res = isrpmvuln(pkg:\"gstreamer1-plugins-bad-free\", rpm:\"gstreamer1-plugins-bad-free~1.10.4~2\", rls:\"EULEROS-2.0SP2\"))) {\n report += res;\n }\n\n if(report != \"\") {\n security_message(data:report);\n } else if (__pkg_match) {\n exit(99);\n }\n exit(0);\n}\n\nexit(0);", "cvss": {"score": 5.0, "vector": "AV:N/AC:L/Au:N/C:N/I:N/A:P"}}, {"lastseen": "2019-05-29T18:33:56", "bulletinFamily": "scanner", "cvelist": ["CVE-2016-9446", "CVE-2016-9810", "CVE-2017-5844", "CVE-2016-10198", "CVE-2017-5837", "CVE-2016-10199", "CVE-2017-5840", "CVE-2017-5843", "CVE-2016-9811", "CVE-2017-5839", "CVE-2017-5842", "CVE-2017-5841", "CVE-2017-5845", "CVE-2017-5838", "CVE-2017-5848"], "description": "The remote host is missing an update for the ", "modified": "2018-11-23T00:00:00", "published": "2017-08-04T00:00:00", "id": "OPENVAS:1361412562310871858", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310871858", "type": "openvas", "title": "RedHat Update for GStreamer RHSA-2017:2060-01", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n# $Id: gb_RHSA-2017_2060-01_GStreamer.nasl 12497 2018-11-23 08:28:21Z cfischer $\n#\n# RedHat Update for GStreamer RHSA-2017:2060-01\n#\n# Authors:\n# System Generated Check\n#\n# Copyright:\n# Copyright (C) 2017 Greenbone Networks GmbH, http://www.greenbone.net\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.871858\");\n script_version(\"$Revision: 12497 $\");\n script_tag(name:\"last_modification\", value:\"$Date: 2018-11-23 09:28:21 +0100 (Fri, 23 Nov 2018) $\");\n script_tag(name:\"creation_date\", value:\"2017-08-04 12:48:01 +0530 (Fri, 04 Aug 2017)\");\n script_cve_id(\"CVE-2016-10198\", \"CVE-2016-10199\", \"CVE-2016-9446\", \"CVE-2016-9810\",\n \"CVE-2016-9811\", \"CVE-2017-5837\", \"CVE-2017-5838\", \"CVE-2017-5839\",\n \"CVE-2017-5840\", \"CVE-2017-5841\", \"CVE-2017-5842\", \"CVE-2017-5843\",\n \"CVE-2017-5844\", \"CVE-2017-5845\", \"CVE-2017-5848\");\n script_tag(name:\"cvss_base\", value:\"5.0\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:L/Au:N/C:N/I:N/A:P\");\n script_tag(name:\"qod_type\", value:\"package\");\n script_name(\"RedHat Update for GStreamer RHSA-2017:2060-01\");\n script_tag(name:\"summary\", value:\"The remote host is missing an update for the 'GStreamer'\n package(s) announced via the referenced advisory.\");\n script_tag(name:\"vuldetect\", value:\"Checks if a vulnerable version is present on the target host.\");\n script_tag(name:\"insight\", value:\"GStreamer is a streaming media framework\n based on graphs of filters which operate on media data. The following packages\n have been upgraded to a later upstream version: clutter-gst2 (2.0.18),\n gnome-video-effects (0.4.3), gstreamer1 (1.10.4), gstreamer1-plugins-bad-free\n (1.10.4), gstreamer1-plugins-base (1.10.4), gstreamer1-plugins-good (1.10.4),\n orc (0.4.26). Security Fix(es): * Multiple flaws were found in gstreamer1,\n gstreamer1-plugins-base, gstreamer1-plugins-good, and\n gstreamer1-plugins-bad-free packages. An attacker could potentially use these\n flaws to crash applications which use the GStreamer framework. (CVE-2016-9446,\n CVE-2016-9810, CVE-2016-9811, CVE-2016-10198, CVE-2016-10199, CVE-2017-5837,\n CVE-2017-5838, CVE-2017-5839, CVE-2017-5840, CVE-2017-5841, CVE-2017-5842,\n CVE-2017-5843, CVE-2017-5844, CVE-2017-5845, CVE-2017-5848) Additional Changes:\n For detailed information on changes in this release, see the Red Hat Enterprise\n Linux 7.4 Release Notes linked from the References section.\");\n script_tag(name:\"affected\", value:\"GStreamer on Red Hat Enterprise Linux Server (v. 7)\");\n script_tag(name:\"solution\", value:\"Please Install the Updated Packages.\");\n\n script_xref(name:\"RHSA\", value:\"2017:2060-01\");\n script_xref(name:\"URL\", value:\"https://www.redhat.com/archives/rhsa-announce/2017-August/msg00026.html\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (C) 2017 Greenbone Networks GmbH\");\n script_family(\"Red Hat Local Security Checks\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/rhel\", \"ssh/login/rpms\", re:\"ssh/login/release=RHENT_7\");\n\n exit(0);\n}\n\ninclude(\"revisions-lib.inc\");\ninclude(\"pkg-lib-rpm.inc\");\n\nrelease = rpm_get_ssh_release();\nif(!release) exit(0);\n\nres = \"\";\n\nif(release == \"RHENT_7\")\n{\n\n if ((res = isrpmvuln(pkg:\"gnome-video-effects\", rpm:\"gnome-video-effects~0.4.3~1.el7\", rls:\"RHENT_7\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"clutter-gst2\", rpm:\"clutter-gst2~2.0.18~1.el7\", rls:\"RHENT_7\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"clutter-gst2-debuginfo\", rpm:\"clutter-gst2-debuginfo~2.0.18~1.el7\", rls:\"RHENT_7\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"gstreamer-plugins-bad-free\", rpm:\"gstreamer-plugins-bad-free~0.10.23~23.el7\", rls:\"RHENT_7\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"gstreamer-plugins-bad-free-debuginfo\", rpm:\"gstreamer-plugins-bad-free-debuginfo~0.10.23~23.el7\", rls:\"RHENT_7\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"gstreamer-plugins-good\", rpm:\"gstreamer-plugins-good~0.10.31~13.el7\", rls:\"RHENT_7\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"gstreamer-plugins-good-debuginfo\", rpm:\"gstreamer-plugins-good-debuginfo~0.10.31~13.el7\", rls:\"RHENT_7\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"gstreamer1\", rpm:\"gstreamer1~1.10.4~2.el7\", rls:\"RHENT_7\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"gstreamer1-debuginfo\", rpm:\"gstreamer1-debuginfo~1.10.4~2.el7\", rls:\"RHENT_7\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"gstreamer1-devel\", rpm:\"gstreamer1-devel~1.10.4~2.el7\", rls:\"RHENT_7\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"gstreamer1-plugins-bad-free\", rpm:\"gstreamer1-plugins-bad-free~1.10.4~2.el7\", rls:\"RHENT_7\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"gstreamer1-plugins-bad-free-debuginfo\", rpm:\"gstreamer1-plugins-bad-free-debuginfo~1.10.4~2.el7\", rls:\"RHENT_7\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"gstreamer1-plugins-base\", rpm:\"gstreamer1-plugins-base~1.10.4~1.el7\", rls:\"RHENT_7\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"gstreamer1-plugins-base-debuginfo\", rpm:\"gstreamer1-plugins-base-debuginfo~1.10.4~1.el7\", rls:\"RHENT_7\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"gstreamer1-plugins-base-devel\", rpm:\"gstreamer1-plugins-base-devel~1.10.4~1.el7\", rls:\"RHENT_7\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"gstreamer1-plugins-good\", rpm:\"gstreamer1-plugins-good~1.10.4~2.el7\", rls:\"RHENT_7\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"gstreamer1-plugins-good-debuginfo\", rpm:\"gstreamer1-plugins-good-debuginfo~1.10.4~2.el7\", rls:\"RHENT_7\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"orc\", rpm:\"orc~0.4.26~1.el7\", rls:\"RHENT_7\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"orc-debuginfo\", rpm:\"orc-debuginfo~0.4.26~1.el7\", rls:\"RHENT_7\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if (__pkg_match) exit(99);\n exit(0);\n}\n", "cvss": {"score": 5.0, "vector": "AV:N/AC:L/Au:N/C:N/I:N/A:P"}}, {"lastseen": "2020-01-27T18:34:06", "bulletinFamily": "scanner", "cvelist": ["CVE-2016-9446", "CVE-2016-9810", "CVE-2017-5844", "CVE-2016-10198", "CVE-2017-5837", "CVE-2016-10199", "CVE-2017-5840", "CVE-2017-5843", "CVE-2016-9811", "CVE-2017-5839", "CVE-2017-5842", "CVE-2017-5841", "CVE-2017-5845", "CVE-2017-5838", "CVE-2017-5848"], "description": "The remote host is missing an update for the Huawei EulerOS\n ", "modified": "2020-01-23T00:00:00", "published": "2020-01-23T00:00:00", "id": "OPENVAS:1361412562311220171205", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562311220171205", "type": "openvas", "title": "Huawei EulerOS: Security Advisory for gstreamer (EulerOS-SA-2017-1205)", "sourceData": "# Copyright (C) 2020 Greenbone Networks GmbH\n# Text descriptions are largely excerpted from the referenced\n# advisory, and are Copyright (C) the respective author(s)\n#\n# SPDX-License-Identifier: GPL-2.0-or-later\n#\n# This program is free software; you can redistribute it and/or\n# modify it under the terms of the GNU General Public License\n# as published by the Free Software Foundation; either version 2\n# of the License, or (at your option) any later version.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.1.2.2017.1205\");\n script_version(\"2020-01-23T10:58:26+0000\");\n script_cve_id(\"CVE-2016-10198\", \"CVE-2016-10199\", \"CVE-2016-9446\", \"CVE-2016-9810\", \"CVE-2016-9811\", \"CVE-2017-5837\", \"CVE-2017-5838\", \"CVE-2017-5839\", \"CVE-2017-5840\", \"CVE-2017-5841\", \"CVE-2017-5842\", \"CVE-2017-5843\", \"CVE-2017-5844\", \"CVE-2017-5845\", \"CVE-2017-5848\");\n script_tag(name:\"cvss_base\", value:\"5.0\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:L/Au:N/C:N/I:N/A:P\");\n script_tag(name:\"last_modification\", value:\"2020-01-23 10:58:26 +0000 (Thu, 23 Jan 2020)\");\n script_tag(name:\"creation_date\", value:\"2020-01-23 10:58:26 +0000 (Thu, 23 Jan 2020)\");\n script_name(\"Huawei EulerOS: Security Advisory for gstreamer (EulerOS-SA-2017-1205)\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (C) 2020 Greenbone Networks GmbH\");\n script_family(\"Huawei EulerOS Local Security Checks\");\n script_dependencies(\"gb_huawei_euleros_consolidation.nasl\");\n script_mandatory_keys(\"ssh/login/euleros\", \"ssh/login/rpms\", re:\"ssh/login/release=EULEROS-2\\.0SP1\");\n\n script_xref(name:\"EulerOS-SA\", value:\"2017-1205\");\n script_xref(name:\"URL\", value:\"https://developer.huaweicloud.com/ict/en/site-euleros/euleros/security-advisories/EulerOS-SA-2017-1205\");\n\n script_tag(name:\"summary\", value:\"The remote host is missing an update for the Huawei EulerOS\n 'gstreamer' package(s) announced via the EulerOS-SA-2017-1205 advisory.\");\n\n script_tag(name:\"vuldetect\", value:\"Checks if a vulnerable package version is present on the target host.\");\n\n script_tag(name:\"insight\", value:\"Multiple flaws were found in gstreamer1, gstreamer1-plugins-base, gstreamer1-plugins-good, and gstreamer1-plugins-bad-free packages. An attacker could potentially use these flaws to crash applications which use the GStreamer framework. (CVE-2016-9446, CVE-2016-9810, CVE-2016-9811, CVE-2016-10198, CVE-2016-10199, CVE-2017-5837, CVE-2017-5838, CVE-2017-5839, CVE-2017-5840, CVE-2017-5841, CVE-2017-5842, CVE-2017-5843, CVE-2017-5844, CVE-2017-5845, CVE-2017-5848)\");\n\n script_tag(name:\"affected\", value:\"'gstreamer' package(s) on Huawei EulerOS V2.0SP1.\");\n\n script_tag(name:\"solution\", value:\"Please install the updated package(s).\");\n\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n script_tag(name:\"qod_type\", value:\"package\");\n\n exit(0);\n}\n\ninclude(\"revisions-lib.inc\");\ninclude(\"pkg-lib-rpm.inc\");\n\nrelease = rpm_get_ssh_release();\nif(!release)\n exit(0);\n\nres = \"\";\nreport = \"\";\n\nif(release == \"EULEROS-2.0SP1\") {\n\n if(!isnull(res = isrpmvuln(pkg:\"gstreamer1\", rpm:\"gstreamer1~1.10.4~2\", rls:\"EULEROS-2.0SP1\"))) {\n report += res;\n }\n\n if(!isnull(res = isrpmvuln(pkg:\"gstreamer1-devel\", rpm:\"gstreamer1-devel~1.10.4~2\", rls:\"EULEROS-2.0SP1\"))) {\n report += res;\n }\n\n if(!isnull(res = isrpmvuln(pkg:\"gstreamer1-plugins-base\", rpm:\"gstreamer1-plugins-base~1.10.4~1\", rls:\"EULEROS-2.0SP1\"))) {\n report += res;\n }\n\n if(!isnull(res = isrpmvuln(pkg:\"gstreamer1-plugins-base-devel\", rpm:\"gstreamer1-plugins-base-devel~1.10.4~1\", rls:\"EULEROS-2.0SP1\"))) {\n report += res;\n }\n\n if(!isnull(res = isrpmvuln(pkg:\"gstreamer1-plugins-base-tools\", rpm:\"gstreamer1-plugins-base-tools~1.10.4~1\", rls:\"EULEROS-2.0SP1\"))) {\n report += res;\n }\n\n if(!isnull(res = isrpmvuln(pkg:\"gstreamer1-plugins-good\", rpm:\"gstreamer1-plugins-good~1.10.4~2\", rls:\"EULEROS-2.0SP1\"))) {\n report += res;\n }\n\n if(!isnull(res = isrpmvuln(pkg:\"gstreamer1-plugins-bad-free\", rpm:\"gstreamer1-plugins-bad-free~1.10.4~2\", rls:\"EULEROS-2.0SP1\"))) {\n report += res;\n }\n\n if(!isnull(res = isrpmvuln(pkg:\"gstreamer-plugins-bad-free\", rpm:\"gstreamer-plugins-bad-free~0.10.23~23\", rls:\"EULEROS-2.0SP1\"))) {\n report += res;\n }\n\n if(!isnull(res = isrpmvuln(pkg:\"gstreamer-plugins-bad-free-devel\", rpm:\"gstreamer-plugins-bad-free-devel~0.10.23~23\", rls:\"EULEROS-2.0SP1\"))) {\n report += res;\n }\n\n if(!isnull(res = isrpmvuln(pkg:\"gstreamer-plugins-bad-free-devel-docs\", rpm:\"gstreamer-plugins-bad-free-devel-docs~0.10.23~23\", rls:\"EULEROS-2.0SP1\"))) {\n report += res;\n }\n\n if(!isnull(res = isrpmvuln(pkg:\"gstreamer-plugins-good\", rpm:\"gstreamer-plugins-good~0.10.31~13\", rls:\"EULEROS-2.0SP1\"))) {\n report += res;\n }\n\n if(report != \"\") {\n security_message(data:report);\n } else if (__pkg_match) {\n exit(99);\n }\n exit(0);\n}\n\nexit(0);", "cvss": {"score": 5.0, "vector": "AV:N/AC:L/Au:N/C:N/I:N/A:P"}}], "fedora": [{"lastseen": "2020-12-21T08:17:54", "bulletinFamily": "unix", "cvelist": ["CVE-2017-5837", "CVE-2017-5839", "CVE-2017-5842", "CVE-2017-5844"], "description": "GStreamer is a streaming media framework, based on graphs of filters which operate on media data. Applications using this library can do anything from real-time sound processing to playing videos, and just about anything else media-related. Its plugin-based architecture means that new data types or processing capabilities can be added simply by installing new plug-ins. This package contains a set of well-maintained base plug-ins. ", "modified": "2017-02-20T18:54:33", "published": "2017-02-20T18:54:33", "id": "FEDORA:3C8E1632A54A", "href": "", "type": "fedora", "title": "[SECURITY] Fedora 25 Update:\n mingw-gstreamer1-plugins-base-1.10.3-1.fc25", "cvss": {"score": 5.0, "vector": "AV:N/AC:L/Au:N/C:N/I:N/A:P"}}], "ubuntu": [{"lastseen": "2020-07-02T11:34:05", "bulletinFamily": "unix", "cvelist": ["CVE-2017-5844", "CVE-2017-5837", "CVE-2016-9811", "CVE-2017-5839", "CVE-2017-5842"], "description": "Hanno B\u00f6ck discovered that GStreamer Base Plugins did not correctly handle \ncertain malformed media files. If a user were tricked into opening a \ncrafted media file with a GStreamer application, an attacker could cause a \ndenial of service via application crash.", "edition": 5, "modified": "2017-03-27T00:00:00", "published": "2017-03-27T00:00:00", "id": "USN-3244-1", "href": "https://ubuntu.com/security/notices/USN-3244-1", "title": "GStreamer Base Plugins vulnerabilities", "type": "ubuntu", "cvss": {"score": 5.0, "vector": "AV:N/AC:L/Au:N/C:N/I:N/A:P"}}], "debian": [{"lastseen": "2020-08-12T01:05:17", "bulletinFamily": "unix", "cvelist": ["CVE-2017-5844", "CVE-2017-5837", "CVE-2016-9811", "CVE-2017-5839", "CVE-2017-5842"], "description": "- -------------------------------------------------------------------------\nDebian Security Advisory DSA-3819-1 security@debian.org\nhttps://www.debian.org/security/ Moritz Muehlenhoff\nMarch 27, 2017 https://www.debian.org/security/faq\n- -------------------------------------------------------------------------\n\nPackage : gst-plugins-base1.0\nCVE ID : CVE-2016-9811 CVE-2017-5837 CVE-2017-5839 CVE-2017-5842 \n CVE-2017-5844\n\nHanno Boeck discovered multiple vulnerabilities in the GStreamer media\nframework and its codecs and demuxers, which may result in denial of\nservice or the execution of arbitrary code if a malformed media file is\nopened.\n\nFor the stable distribution (jessie), these problems have been fixed in\nversion 1.4.4-2+deb8u1.\n\nFor the upcoming stable distribution (stretch), these problems have been\nfixed in version 1.10.4-1.\n\nFor the unstable distribution (sid), these problems have been fixed in\nversion 1.10.4-1.\n\nWe recommend that you upgrade your gst-plugins-base1.0 packages.\n\nFurther information about Debian Security Advisories, how to apply\nthese updates to your system and frequently asked questions can be\nfound at: https://www.debian.org/security/\n\nMailing list: debian-security-announce@lists.debian.org\n", "edition": 8, "modified": "2017-03-27T20:47:28", "published": "2017-03-27T20:47:28", "id": "DEBIAN:DSA-3819-1:A47BA", "href": "https://lists.debian.org/debian-security-announce/debian-security-announce-2017/msg00075.html", "title": "[SECURITY] [DSA 3819-1] gst-plugins-base1.0 security update", "type": "debian", "cvss": {"score": 5.0, "vector": "AV:N/AC:L/Au:N/C:N/I:N/A:P"}}], "centos": [{"lastseen": "2019-12-20T18:24:14", "bulletinFamily": "unix", "cvelist": ["CVE-2016-9446", "CVE-2016-9810", "CVE-2017-5844", "CVE-2016-10198", "CVE-2017-5837", "CVE-2016-10199", "CVE-2017-5840", "CVE-2017-5843", "CVE-2016-9811", "CVE-2017-5839", "CVE-2017-5842", "CVE-2017-5841", "CVE-2017-5845", "CVE-2017-5838", "CVE-2017-5848"], "description": "**CentOS Errata and Security Advisory** CESA-2017:2060\n\n\nGStreamer is a streaming media framework based on graphs of filters which operate on media data.\n\nThe following packages have been upgraded to a later upstream version: clutter-gst2 (2.0.18), gnome-video-effects (0.4.3), gstreamer1 (1.10.4), gstreamer1-plugins-bad-free (1.10.4), gstreamer1-plugins-base (1.10.4), gstreamer1-plugins-good (1.10.4), orc (0.4.26).\n\nSecurity Fix(es):\n\n* Multiple flaws were found in gstreamer1, gstreamer1-plugins-base, gstreamer1-plugins-good, and gstreamer1-plugins-bad-free packages. An attacker could potentially use these flaws to crash applications which use the GStreamer framework. (CVE-2016-9446, CVE-2016-9810, CVE-2016-9811, CVE-2016-10198, CVE-2016-10199, CVE-2017-5837, CVE-2017-5838, CVE-2017-5839, CVE-2017-5840, CVE-2017-5841, CVE-2017-5842, CVE-2017-5843, CVE-2017-5844, CVE-2017-5845, CVE-2017-5848)\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Red Hat Enterprise Linux 7.4 Release Notes linked from the References section.\n\n**Merged security bulletin from advisories:**\nhttp://lists.centos.org/pipermail/centos-cr-announce/2017-August/004037.html\nhttp://lists.centos.org/pipermail/centos-cr-announce/2017-August/004174.html\nhttp://lists.centos.org/pipermail/centos-cr-announce/2017-August/004194.html\nhttp://lists.centos.org/pipermail/centos-cr-announce/2017-August/004195.html\nhttp://lists.centos.org/pipermail/centos-cr-announce/2017-August/004196.html\nhttp://lists.centos.org/pipermail/centos-cr-announce/2017-August/004197.html\nhttp://lists.centos.org/pipermail/centos-cr-announce/2017-August/004198.html\nhttp://lists.centos.org/pipermail/centos-cr-announce/2017-August/004199.html\nhttp://lists.centos.org/pipermail/centos-cr-announce/2017-August/004423.html\n\n**Affected packages:**\nclutter-gst2\nclutter-gst2-devel\ngnome-video-effects\ngstreamer-plugins-bad-free\ngstreamer-plugins-bad-free-devel\ngstreamer-plugins-bad-free-devel-docs\ngstreamer-plugins-good\ngstreamer-plugins-good-devel-docs\ngstreamer1\ngstreamer1-devel\ngstreamer1-devel-docs\ngstreamer1-plugins-bad-free\ngstreamer1-plugins-bad-free-devel\ngstreamer1-plugins-bad-free-gtk\ngstreamer1-plugins-base\ngstreamer1-plugins-base-devel\ngstreamer1-plugins-base-devel-docs\ngstreamer1-plugins-base-tools\ngstreamer1-plugins-good\norc\norc-compiler\norc-devel\norc-doc\n\n**Upstream details at:**\n", "edition": 84, "modified": "2017-08-24T01:40:19", "published": "2017-08-24T01:36:20", "id": "CESA-2017:2060", "href": "http://lists.centos.org/pipermail/centos-cr-announce/2017-August/004037.html", "title": "clutter, gnome, gstreamer, gstreamer1, orc security update", "type": "centos", "cvss": {"score": 5.0, "vector": "AV:N/AC:L/Au:N/C:N/I:N/A:P"}}], "redhat": [{"lastseen": "2019-08-13T18:46:30", "bulletinFamily": "unix", "cvelist": ["CVE-2016-10198", "CVE-2016-10199", "CVE-2016-9446", "CVE-2016-9810", "CVE-2016-9811", "CVE-2017-5837", "CVE-2017-5838", "CVE-2017-5839", "CVE-2017-5840", "CVE-2017-5841", "CVE-2017-5842", "CVE-2017-5843", "CVE-2017-5844", "CVE-2017-5845", "CVE-2017-5848"], "description": "GStreamer is a streaming media framework based on graphs of filters which operate on media data.\n\nThe following packages have been upgraded to a later upstream version: clutter-gst2 (2.0.18), gnome-video-effects (0.4.3), gstreamer1 (1.10.4), gstreamer1-plugins-bad-free (1.10.4), gstreamer1-plugins-base (1.10.4), gstreamer1-plugins-good (1.10.4), orc (0.4.26).\n\nSecurity Fix(es):\n\n* Multiple flaws were found in gstreamer1, gstreamer1-plugins-base, gstreamer1-plugins-good, and gstreamer1-plugins-bad-free packages. An attacker could potentially use these flaws to crash applications which use the GStreamer framework. (CVE-2016-9446, CVE-2016-9810, CVE-2016-9811, CVE-2016-10198, CVE-2016-10199, CVE-2017-5837, CVE-2017-5838, CVE-2017-5839, CVE-2017-5840, CVE-2017-5841, CVE-2017-5842, CVE-2017-5843, CVE-2017-5844, CVE-2017-5845, CVE-2017-5848)\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Red Hat Enterprise Linux 7.4 Release Notes linked from the References section.", "modified": "2018-04-12T03:32:49", "published": "2017-08-01T09:57:18", "id": "RHSA-2017:2060", "href": "https://access.redhat.com/errata/RHSA-2017:2060", "type": "redhat", "title": "(RHSA-2017:2060) Moderate: GStreamer security, bug fix, and enhancement update", "cvss": {"score": 5.0, "vector": "AV:N/AC:L/Au:N/C:N/I:N/A:P"}}], "oraclelinux": [{"lastseen": "2020-10-22T17:04:07", "bulletinFamily": "unix", "cvelist": ["CVE-2016-9446", "CVE-2016-9810", "CVE-2017-5844", "CVE-2016-10198", "CVE-2017-5837", "CVE-2016-10199", "CVE-2017-5840", "CVE-2017-5843", "CVE-2016-9811", "CVE-2017-5839", "CVE-2017-5842", "CVE-2017-5841", "CVE-2017-5845", "CVE-2017-5838", "CVE-2017-5848"], "description": "clutter-gst2\n[2.0.18-1]\n- Update to 2.0.18\n- Remove obsolete patches\n- Use license macro for COPYING\n- Resolves: #1386833\ngnome-video-effects\n[0.4.3-1]\n- Update to 0.4.3\n- Resolves: #1386968\n[0.4.1-5]\n- Fix URL (rhbz#1380981)\ngstreamer-plugins-bad-free\n[0.10.23-23]\n- Rebuild with hardened flags\nResolves: #1420764\ngstreamer-plugins-good\n[0.10.31-13]\n- Rebuild with correct hardening flags\n Resolves: #1420765\ngstreamer1\n[1.10.4-2]\n- fix origin\n- Resolves: #1420650\n[1.10.4-1]\n- Update to 1.10.4\n- update patches\n- Resolves: #1420650\ngstreamer1-plugins-bad-free\n[1.10.4-2]\n- Disable plugins\n- Fix origin\n- Resolves: #1429587\n[1.10.4-1]\n- Update to 1.10.4\n- Remove unbuilt plugins\n- Resolves: #1429587\ngstreamer1-plugins-base\n[1.10.4-1]\n- Update to 1.10.4\n- Resolves: #1428918\n[1.4.5-3]\n- Fix unit test on ppc64\n- Resolves: #1265905\ngstreamer1-plugins-good\n[1.10.4-2]\n- Fix origin\n Resolves: #1429577\n[1.10.4-1]\n- Update to 1.10.4\n Resolves: #1429577\norc\n[0.4.26-1]\n- Update to 0.4.26\n- Remove upstreamed patches\n- Resolves: #1430051", "edition": 5, "modified": "2017-08-07T00:00:00", "published": "2017-08-07T00:00:00", "id": "ELSA-2017-2060", "href": "http://linux.oracle.com/errata/ELSA-2017-2060.html", "title": "GStreamer security, bug fix, and enhancement update", "type": "oraclelinux", "cvss": {"score": 5.0, "vector": "AV:N/AC:L/Au:N/C:N/I:N/A:P"}}], "gentoo": [{"lastseen": "2017-05-28T22:26:23", "bulletinFamily": "unix", "cvelist": ["CVE-2016-9446", "CVE-2016-9810", "CVE-2016-9636", "CVE-2017-5844", "CVE-2016-10198", "CVE-2017-5837", "CVE-2016-9445", "CVE-2016-9809", "CVE-2016-10199", "CVE-2016-9808", "CVE-2016-9812", "CVE-2017-5840", "CVE-2016-9635", "CVE-2017-5843", "CVE-2016-9634", "CVE-2016-9811", "CVE-2017-5839", "CVE-2017-5842", "CVE-2017-5847", "CVE-2016-9813", "CVE-2016-9807", "CVE-2017-5841", "CVE-2017-5845", "CVE-2016-9447", "CVE-2017-5838", "CVE-2017-5846", "CVE-2017-5848"], "description": "### Background\n\nThe GStreamer plug-ins provide decoders to the GStreamer open source media framework. \n\n### Description\n\nMultiple vulnerabilities have been discovered in various GStreamer plug-ins. Please review the CVE identifiers referenced below for details. \n\n### Impact\n\nA remote attacker could entice a user or automated system using a GStreamer plug-in to process a specially crafted file, resulting in the execution of arbitrary code or a Denial of Service. \n\n### Workaround\n\nThere is no known workaround at this time.\n\n### Resolution\n\nAll gst-plugins-bad users should upgrade to the latest version:\n \n \n # emerge --sync\n # emerge --ask --oneshot --verbose\n \">=media-libs/gst-plugins-bad-1.10.3:1.0\"\n \n\nAll gst-plugins-good users should upgrade to the latest version:\n \n \n # emerge --sync\n # emerge --ask --oneshot --verbose\n \">=media-libs/gst-plugins-good-1.10.3:1.0\"\n \n\nAll gst-plugins-base users should upgrade to the latest version:\n \n \n # emerge --sync\n # emerge --ask --oneshot --verbose\n \">=media-libs/gst-plugins-base-1.10.3:1.0\"\n \n\nAll gst-plugins-ugly users should upgrade to the latest version:\n \n \n # emerge --sync\n # emerge --ask --oneshot --verbose\n \">=media-libs/gst-plugins-ugly-1.10.3:1.0\"", "edition": 1, "modified": "2017-05-18T00:00:00", "published": "2017-05-18T00:00:00", "href": "https://security.gentoo.org/glsa/201705-10", "id": "GLSA-201705-10", "title": "GStreamer plug-ins: User-assisted execution of arbitrary code", "type": "gentoo", "cvss": {"score": 7.5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}}]}