Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
oraclelinuxOracleLinuxELSA-2024-2287
HistoryMay 02, 2024 - 12:00 a.m.

gstreamer1-plugins-bad-free security update

2024-05-0200:00:00
linux.oracle.com
2
gstreamer1-plugins
bad-free
security
update
unix

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

7.8 High

AI Score

Confidence

Low

0.0005 Low

EPSS

Percentile

16.2%

JSON

[1.22.1-4]

  • CVE-2023-40474: Integer overflow leading to heap overwrite in MXF
  • CVE-2023-40475: Integer overflow leading to heap overwrite in MXF
  • CVE-2023-40476: Integer overflow in H.265 video parser
  • ZDI-CAN-22300: buffer overflow vulnerability
  • Resolves: RHEL-19501, RHEL-19505, RHEL-19506, RHEL-20201
    [1.22.1-3]
  • Bump version
  • Resolves: RHEL-16795, RHEL-16788
OSVersionArchitecturePackageVersionFilename
oracle linux9srcgstreamer1-plugins-bad-free< 1.22.1-4.el9gstreamer1-plugins-bad-free-1.22.1-4.el9.src.rpm
oracle linux9srcgstreamer1-plugins-bad-free< 1.22.1-4.el9gstreamer1-plugins-bad-free-1.22.1-4.el9.src.rpm
oracle linux9aarch64gstreamer1-plugins-bad-free< 1.22.1-4.el9gstreamer1-plugins-bad-free-1.22.1-4.el9.aarch64.rpm
oracle linux9aarch64gstreamer1-plugins-bad-free-devel< 1.22.1-4.el9gstreamer1-plugins-bad-free-devel-1.22.1-4.el9.aarch64.rpm
oracle linux9srcgstreamer1-plugins-bad-free< 1.22.1-4.el9gstreamer1-plugins-bad-free-1.22.1-4.el9.src.rpm
oracle linux9srcgstreamer1-plugins-bad-free< 1.22.1-4.el9gstreamer1-plugins-bad-free-1.22.1-4.el9.src.rpm
oracle linux9i686gstreamer1-plugins-bad-free< 1.22.1-4.el9gstreamer1-plugins-bad-free-1.22.1-4.el9.i686.rpm
oracle linux9x86_64gstreamer1-plugins-bad-free< 1.22.1-4.el9gstreamer1-plugins-bad-free-1.22.1-4.el9.x86_64.rpm
oracle linux9i686gstreamer1-plugins-bad-free-devel< 1.22.1-4.el9gstreamer1-plugins-bad-free-devel-1.22.1-4.el9.i686.rpm
oracle linux9x86_64gstreamer1-plugins-bad-free-devel< 1.22.1-4.el9gstreamer1-plugins-bad-free-devel-1.22.1-4.el9.x86_64.rpm

Related

osv 7
nessus 35
rocky 2
redhat 2
almalinux 2
amazon 1
openvas 28
debian 2
oraclelinux 1
rosalinux 1
photon 3
ubuntu 1
redhatcve 4
cve 4
zdi 4
nvd 4
debiancve 4
cvelist 4
ubuntucve 4
alpinelinux 3
vulnrichment 2
veracode 3
mageia 1
hp 2
osv
osv
Moderate: gstreamer1-plugins-bad-free security update
2024-05-10 14:32:38
Moderate: gstreamer1-plugins-bad-free security update
2024-04-30 00:00:00
gst-plugins-bad1.0 - security update
2023-10-28 00:00:00
nessus
nessus
RHEL 9 : gstreamer1-plugins-bad-free (RHSA-2024:2287)
2024-04-30 00:00:00
Oracle Linux 9 : gstreamer1-plugins-bad-free (ELSA-2024-2287)
2024-05-06 00:00:00
Rocky Linux 9 : gstreamer1-plugins-bad-free (RLSA-2024:2287)
2024-05-14 00:00:00
rocky
rocky
gstreamer1-plugins-bad-free security update
2024-05-10 14:32:38
gstreamer1-plugins-bad-free security update
2024-06-14 13:59:30
redhat
redhat
(RHSA-2024:2287) Moderate: gstreamer1-plugins-bad-free security update
2024-04-30 06:15:16
(RHSA-2024:3060) Moderate: gstreamer1-plugins-bad-free security update
2024-05-22 06:35:29
almalinux
almalinux
Moderate: gstreamer1-plugins-bad-free security update
2024-04-30 00:00:00
Moderate: gstreamer1-plugins-bad-free security update
2024-05-22 00:00:00
amazon
amazon
Important: gstreamer1-plugins-bad-free
2023-10-12 15:09:00
openvas
openvas
Debian: Security Advisory (DSA-5533-1)
2023-10-25 00:00:00
Debian: Security Advisory (DLA-3633-1)
2023-10-30 00:00:00
openSUSE: Security Advisory for gstreamer (SUSE-SU-2023:4594-1)
2024-03-04 00:00:00
debian
debian
[SECURITY] [DLA 3633-1] gst-plugins-bad1.0 security update
2023-10-28 12:08:28
[SECURITY] [DSA 5533-1] gst-plugins-bad1.0 security update
2023-10-24 20:58:56
oraclelinux
oraclelinux
gstreamer1-plugins-bad-free security update
2024-05-23 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2024-2357
2024-02-20 10:26:09
photon
photon
Important Photon OS Security Update - PHSA-2023-5.0-0145
2023-11-17 00:00:00
Important Photon OS Security Update - PHSA-2023-5.0-0167
2023-12-12 00:00:00
Important Photon OS Security Update - PHSA-2023-4.0-0513
2023-11-16 00:00:00
ubuntu
ubuntu
GStreamer Bad Plugins vulnerabilities
2023-11-29 00:00:00
redhatcve
redhatcve
CVE-2023-50186
2024-04-20 17:42:19
CVE-2023-40476
2023-12-14 18:03:03
CVE-2023-40475
2023-12-14 18:02:49
cve
cve
CVE-2023-50186
2024-05-03 03:16:02
CVE-2023-40475
2024-05-03 03:15:20
CVE-2023-40474
2024-05-03 03:15:19
zdi
zdi
GStreamer AV1 Video Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
2024-04-19 00:00:00
GStreamer MXF File Parsing Integer Overflow Remote Code Execution Vulnerability
2023-09-27 00:00:00
GStreamer H265 Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
2023-09-27 00:00:00
nvd
nvd
CVE-2023-50186
2024-05-03 03:16:02
CVE-2023-40475
2024-05-03 03:15:20
CVE-2023-40474
2024-05-03 03:15:19
debiancve
debiancve
CVE-2023-50186
2024-05-03 03:16:02
CVE-2023-40475
2024-05-03 03:15:20
CVE-2023-40474
2024-05-03 03:15:19
cvelist
cvelist
CVE-2023-50186 GStreamer AV1 Video Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
2024-05-03 02:14:13
CVE-2023-40475 GStreamer MXF File Parsing Integer Overflow Remote Code Execution Vulnerability
2024-05-03 02:11:11
CVE-2023-40476 GStreamer H265 Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
2024-05-03 02:11:12
ubuntucve
ubuntucve
CVE-2023-50186
2024-05-03 00:00:00
CVE-2023-40475
2023-09-28 00:00:00
CVE-2023-40476
2023-09-28 00:00:00
alpinelinux
alpinelinux
CVE-2023-40475
2024-05-03 03:15:20
CVE-2023-40474
2024-05-03 03:15:19
CVE-2023-40476
2024-05-03 03:15:20
vulnrichment
vulnrichment
CVE-2023-40475 GStreamer MXF File Parsing Integer Overflow Remote Code Execution Vulnerability
2024-05-03 02:11:11
CVE-2023-40474 GStreamer MXF File Parsing Integer Overflow Remote Code Execution Vulnerability
2024-05-03 02:11:10
veracode
veracode
Integer Overflow
2023-11-30 16:32:06
Integer Overflow
2023-11-30 16:32:02
Heap Buffer Overflow
2023-11-30 16:32:09
mageia
mageia
Updated gstreamer packages fix many security vulnerabilities
2023-12-22 14:04:51
hp
hp
HP ThinPro 8.1 SP 2 Security Updates
2024-04-12 00:00:00
HP ThinPro 8.0 SP 8 Security Updates
2024-03-01 00:00:00

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

7.8 High

AI Score

Confidence

Low

0.0005 Low

EPSS

Percentile

16.2%

JSON
Related for ELSA-2024-2287
osv7nessus35rocky2redhat2almalinux2amazon1openvas28debian2oraclelinux1rosalinux1photon3ubuntu1redhatcve4cve4zdi4nvd4debiancve4cvelist4ubuntucve4alpinelinux3vulnrichment2veracode3mageia1hp2