Lucene search

K
debianDebianDEBIAN:DLA-3505-1:94B5C
HistoryJul 25, 2023 - 5:12 p.m.

[SECURITY] [DLA 3505-1] gst-plugins-good1.0 security update

2023-07-2517:12:19
lists.debian.org
5
gstreamer media framework
arbitrary code execution
denial of service
security update.
debian lts
debian 10 buster
cve-2023-37327

7.6 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H

7.7 High

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

16.3%


Debian LTS Advisory DLA-3505-1 [email protected]
https://www.debian.org/lts/security/ Thorsten Alteholz
July 25, 2023 https://wiki.debian.org/LTS


Package : gst-plugins-good1.0
Version : 1.14.4-1+deb10u3
CVE ID : CVE-2023-37327

Multiple multiple vulnerabilities were discovered in plugins for the
GStreamer media framework and its codecs and demuxers, which may result in
denial of service or potentially the execution of arbitrary code if a
malformed media file is opened.

For Debian 10 buster, this problem has been fixed in version
1.14.4-1+deb10u3.

We recommend that you upgrade your gst-plugins-good1.0 packages.

For the detailed security status of gst-plugins-good1.0 please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/gst-plugins-good1.0

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS

7.6 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H

7.7 High

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

16.3%