Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
oraclelinuxOracleLinuxELSA-2024-2287
HistoryMay 02, 2024 - 12:00 a.m.

gstreamer1-plugins-bad-free security update

2024-05-0200:00:00
linux.oracle.com
2
gstreamer1-plugins
bad-free
security
update
unix

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

7.8 High

AI Score

Confidence

Low

0.0005 Low

EPSS

Percentile

16.2%

JSON

[1.22.1-4]

  • CVE-2023-40474: Integer overflow leading to heap overwrite in MXF
  • CVE-2023-40475: Integer overflow leading to heap overwrite in MXF
  • CVE-2023-40476: Integer overflow in H.265 video parser
  • ZDI-CAN-22300: buffer overflow vulnerability
  • Resolves: RHEL-19501, RHEL-19505, RHEL-19506, RHEL-20201
    [1.22.1-3]
  • Bump version
  • Resolves: RHEL-16795, RHEL-16788
OSVersionArchitecturePackageVersionFilename
oracle linux9srcgstreamer1-plugins-bad-free< 1.22.1-4.el9gstreamer1-plugins-bad-free-1.22.1-4.el9.src.rpm
oracle linux9srcgstreamer1-plugins-bad-free< 1.22.1-4.el9gstreamer1-plugins-bad-free-1.22.1-4.el9.src.rpm
oracle linux9aarch64gstreamer1-plugins-bad-free< 1.22.1-4.el9gstreamer1-plugins-bad-free-1.22.1-4.el9.aarch64.rpm
oracle linux9aarch64gstreamer1-plugins-bad-free-devel< 1.22.1-4.el9gstreamer1-plugins-bad-free-devel-1.22.1-4.el9.aarch64.rpm
oracle linux9srcgstreamer1-plugins-bad-free< 1.22.1-4.el9gstreamer1-plugins-bad-free-1.22.1-4.el9.src.rpm
oracle linux9srcgstreamer1-plugins-bad-free< 1.22.1-4.el9gstreamer1-plugins-bad-free-1.22.1-4.el9.src.rpm
oracle linux9i686gstreamer1-plugins-bad-free< 1.22.1-4.el9gstreamer1-plugins-bad-free-1.22.1-4.el9.i686.rpm
oracle linux9x86_64gstreamer1-plugins-bad-free< 1.22.1-4.el9gstreamer1-plugins-bad-free-1.22.1-4.el9.x86_64.rpm
oracle linux9i686gstreamer1-plugins-bad-free-devel< 1.22.1-4.el9gstreamer1-plugins-bad-free-devel-1.22.1-4.el9.i686.rpm
oracle linux9x86_64gstreamer1-plugins-bad-free-devel< 1.22.1-4.el9gstreamer1-plugins-bad-free-devel-1.22.1-4.el9.x86_64.rpm

Related

redhat 2
nessus 35
almalinux 2
osv 7
rocky 2
oraclelinux 1
debian 2
openvas 28
amazon 1
rosalinux 1
ubuntu 1
photon 3
zdi 4
nvd 4
redhatcve 4
cve 4
ubuntucve 4
debiancve 4
cvelist 4
veracode 3
vulnrichment 2
alpinelinux 3
mageia 1
hp 2
redhat
redhat
(RHSA-2024:2287) Moderate: gstreamer1-plugins-bad-free security update
2024-04-30 06:15:16
(RHSA-2024:3060) Moderate: gstreamer1-plugins-bad-free security update
2024-05-22 06:35:29
nessus
nessus
Rocky Linux 9 : gstreamer1-plugins-bad-free (RLSA-2024:2287)
2024-05-14 00:00:00
Oracle Linux 9 : gstreamer1-plugins-bad-free (ELSA-2024-2287)
2024-05-06 00:00:00
RHEL 9 : gstreamer1-plugins-bad-free (RHSA-2024:2287)
2024-04-30 00:00:00
almalinux
almalinux
Moderate: gstreamer1-plugins-bad-free security update
2024-04-30 00:00:00
Moderate: gstreamer1-plugins-bad-free security update
2024-05-22 00:00:00
osv
osv
Moderate: gstreamer1-plugins-bad-free security update
2024-04-30 00:00:00
Moderate: gstreamer1-plugins-bad-free security update
2024-05-10 14:32:38
Moderate: gstreamer1-plugins-bad-free security update
2024-05-22 00:00:00
rocky
rocky
gstreamer1-plugins-bad-free security update
2024-05-10 14:32:38
gstreamer1-plugins-bad-free security update
2024-06-14 13:59:30
oraclelinux
oraclelinux
gstreamer1-plugins-bad-free security update
2024-05-23 00:00:00
debian
debian
[SECURITY] [DSA 5533-1] gst-plugins-bad1.0 security update
2023-10-24 20:58:56
[SECURITY] [DLA 3633-1] gst-plugins-bad1.0 security update
2023-10-28 12:08:28
openvas
openvas
Debian: Security Advisory (DLA-3633-1)
2023-10-30 00:00:00
Debian: Security Advisory (DSA-5533-1)
2023-10-25 00:00:00
openSUSE: Security Advisory for gstreamer (openSUSE-SU-2023:0409-1)
2024-03-04 00:00:00
amazon
amazon
Important: gstreamer1-plugins-bad-free
2023-10-12 15:09:00
rosalinux
rosalinux
Advisory ROSA-SA-2024-2357
2024-02-20 10:26:09
ubuntu
ubuntu
GStreamer Bad Plugins vulnerabilities
2023-11-29 00:00:00
photon
photon
Important Photon OS Security Update - PHSA-2023-5.0-0145
2023-11-17 00:00:00
Important Photon OS Security Update - PHSA-2023-5.0-0167
2023-12-12 00:00:00
Important Photon OS Security Update - PHSA-2023-4.0-0513
2023-11-16 00:00:00
zdi
zdi
GStreamer AV1 Video Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
2024-04-19 00:00:00
GStreamer MXF File Parsing Integer Overflow Remote Code Execution Vulnerability
2023-09-27 00:00:00
GStreamer MXF File Parsing Integer Overflow Remote Code Execution Vulnerability
2023-09-27 00:00:00
nvd
nvd
CVE-2023-50186
2024-05-03 03:16:02
CVE-2023-40475
2024-05-03 03:15:20
CVE-2023-40476
2024-05-03 03:15:20
redhatcve
redhatcve
CVE-2023-50186
2024-04-20 17:42:19
CVE-2023-40475
2023-12-14 18:02:49
CVE-2023-40474
2023-12-14 18:02:57
cve
cve
CVE-2023-50186
2024-05-03 03:16:02
CVE-2023-40475
2024-05-03 03:15:20
CVE-2023-40474
2024-05-03 03:15:19
ubuntucve
ubuntucve
CVE-2023-50186
2024-05-03 00:00:00
CVE-2023-40474
2023-09-28 00:00:00
CVE-2023-40475
2023-09-28 00:00:00
debiancve
debiancve
CVE-2023-50186
2024-05-03 03:16:02
CVE-2023-40474
2024-05-03 03:15:19
CVE-2023-40476
2024-05-03 03:15:20
cvelist
cvelist
CVE-2023-50186 GStreamer AV1 Video Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
2024-05-03 02:14:13
CVE-2023-40475 GStreamer MXF File Parsing Integer Overflow Remote Code Execution Vulnerability
2024-05-03 02:11:11
CVE-2023-40474 GStreamer MXF File Parsing Integer Overflow Remote Code Execution Vulnerability
2024-05-03 02:11:10
veracode
veracode
Heap Buffer Overflow
2023-11-30 16:32:09
Integer Overflow
2023-11-30 16:32:06
Integer Overflow
2023-11-30 16:32:02
vulnrichment
vulnrichment
CVE-2023-40474 GStreamer MXF File Parsing Integer Overflow Remote Code Execution Vulnerability
2024-05-03 02:11:10
CVE-2023-40475 GStreamer MXF File Parsing Integer Overflow Remote Code Execution Vulnerability
2024-05-03 02:11:11
alpinelinux
alpinelinux
CVE-2023-40474
2024-05-03 03:15:19
CVE-2023-40475
2024-05-03 03:15:20
CVE-2023-40476
2024-05-03 03:15:20
mageia
mageia
Updated gstreamer packages fix many security vulnerabilities
2023-12-22 14:04:51
hp
hp
HP ThinPro 8.1 SP 2 Security Updates
2024-04-12 00:00:00
HP ThinPro 8.0 SP 8 Security Updates
2024-03-01 00:00:00

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

7.8 High

AI Score

Confidence

Low

0.0005 Low

EPSS

Percentile

16.2%

JSON
Related for ELSA-2024-2287
redhat2nessus35almalinux2osv7rocky2oraclelinux1debian2openvas28amazon1rosalinux1ubuntu1photon3zdi4nvd4redhatcve4cve4ubuntucve4debiancve4cvelist4veracode3vulnrichment2alpinelinux3mageia1hp2