Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
oraclelinuxOracleLinuxELSA-2024-3060
HistoryMay 23, 2024 - 12:00 a.m.

gstreamer1-plugins-bad-free security update

2024-05-2300:00:00
linux.oracle.com
5
gstreamer1 h.265 rhel-19500 unix cve-2023-40474 resolves

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

7.2 High

AI Score

Confidence

Low

0.0005 Low

EPSS

Percentile

16.2%

JSON

[1.16.1-4.0.1]

  • Update origin URL [Orabug: 36209826]
    [1.16.1-4]
  • Patch CVE-2023-40474: Integer overflow
  • Patch CVE-2023-40475: Integer overflow
  • Patch CVE-2023-40476: Integer overflow in H.265 video parser
  • Resolves: RHEL-19500, RHEL-19504, RHEL-19507
    [1.16.1-3]
  • Bump to avoid conflict with z stream.
  • Resolves: RHEL-16794
OSVersionArchitecturePackageVersionFilename
oracle linux8srcgstreamer1-plugins-bad-free< 1.16.1-4.0.1.el8gstreamer1-plugins-bad-free-1.16.1-4.0.1.el8.src.rpm
oracle linux8srcgstreamer1-plugins-bad-free< 1.16.1-4.0.1.el8gstreamer1-plugins-bad-free-1.16.1-4.0.1.el8.src.rpm
oracle linux8aarch64gstreamer1-plugins-bad-free< 1.16.1-4.0.1.el8gstreamer1-plugins-bad-free-1.16.1-4.0.1.el8.aarch64.rpm
oracle linux8aarch64gstreamer1-plugins-bad-free-devel< 1.16.1-4.0.1.el8gstreamer1-plugins-bad-free-devel-1.16.1-4.0.1.el8.aarch64.rpm
oracle linux8srcgstreamer1-plugins-bad-free< 1.16.1-4.0.1.el8gstreamer1-plugins-bad-free-1.16.1-4.0.1.el8.src.rpm
oracle linux8srcgstreamer1-plugins-bad-free< 1.16.1-4.0.1.el8gstreamer1-plugins-bad-free-1.16.1-4.0.1.el8.src.rpm
oracle linux8i686gstreamer1-plugins-bad-free< 1.16.1-4.0.1.el8gstreamer1-plugins-bad-free-1.16.1-4.0.1.el8.i686.rpm
oracle linux8x86_64gstreamer1-plugins-bad-free< 1.16.1-4.0.1.el8gstreamer1-plugins-bad-free-1.16.1-4.0.1.el8.x86_64.rpm
oracle linux8i686gstreamer1-plugins-bad-free-devel< 1.16.1-4.0.1.el8gstreamer1-plugins-bad-free-devel-1.16.1-4.0.1.el8.i686.rpm
oracle linux8x86_64gstreamer1-plugins-bad-free-devel< 1.16.1-4.0.1.el8gstreamer1-plugins-bad-free-devel-1.16.1-4.0.1.el8.x86_64.rpm

Related

nessus 35
osv 7
rocky 2
debian 2
openvas 27
almalinux 2
amazon 1
redhat 2
rosalinux 1
oraclelinux 1
ubuntu 1
photon 3
cve 3
zdi 3
veracode 3
cvelist 3
alpinelinux 3
redhatcve 3
nvd 3
ubuntucve 3
vulnrichment 2
debiancve 3
mageia 1
hp 2
nessus
nessus
Debian DSA-5533-1 : gst-plugins-bad1.0 - security update
2023-10-25 00:00:00
Oracle Linux 8 : gstreamer1-plugins-bad-free (ELSA-2024-3060)
2024-05-28 00:00:00
Rocky Linux 8 : gstreamer1-plugins-bad-free (RLSA-2024:3060)
2024-06-14 00:00:00
osv
osv
gst-plugins-bad1.0 - security update
2023-10-24 00:00:00
Moderate: gstreamer1-plugins-bad-free security update
2024-05-22 00:00:00
gst-plugins-bad1.0 - security update
2023-10-28 00:00:00
rocky
rocky
gstreamer1-plugins-bad-free security update
2024-06-14 13:59:30
gstreamer1-plugins-bad-free security update
2024-05-10 14:32:38
debian
debian
[SECURITY] [DSA 5533-1] gst-plugins-bad1.0 security update
2023-10-24 20:58:56
[SECURITY] [DLA 3633-1] gst-plugins-bad1.0 security update
2023-10-28 12:08:28
openvas
openvas
Debian: Security Advisory (DLA-3633-1)
2023-10-30 00:00:00
Debian: Security Advisory (DSA-5533-1)
2023-10-25 00:00:00
openSUSE: Security Advisory for gstreamer (openSUSE-SU-2023:0409-1)
2024-03-04 00:00:00
almalinux
almalinux
Moderate: gstreamer1-plugins-bad-free security update
2024-05-22 00:00:00
Moderate: gstreamer1-plugins-bad-free security update
2024-04-30 00:00:00
amazon
amazon
Important: gstreamer1-plugins-bad-free
2023-10-12 15:09:00
redhat
redhat
(RHSA-2024:3060) Moderate: gstreamer1-plugins-bad-free security update
2024-05-22 06:35:29
(RHSA-2024:2287) Moderate: gstreamer1-plugins-bad-free security update
2024-04-30 06:15:16
rosalinux
rosalinux
Advisory ROSA-SA-2024-2357
2024-02-20 10:26:09
oraclelinux
oraclelinux
gstreamer1-plugins-bad-free security update
2024-05-02 00:00:00
ubuntu
ubuntu
GStreamer Bad Plugins vulnerabilities
2023-11-29 00:00:00
photon
photon
Important Photon OS Security Update - PHSA-2023-5.0-0145
2023-11-17 00:00:00
Important Photon OS Security Update - PHSA-2023-5.0-0167
2023-12-12 00:00:00
Important Photon OS Security Update - PHSA-2023-4.0-0513
2023-11-16 00:00:00
cve
cve
CVE-2023-40475
2024-05-03 03:15:20
CVE-2023-40474
2024-05-03 03:15:19
CVE-2023-40476
2024-05-03 03:15:20
zdi
zdi
GStreamer MXF File Parsing Integer Overflow Remote Code Execution Vulnerability
2023-09-27 00:00:00
GStreamer MXF File Parsing Integer Overflow Remote Code Execution Vulnerability
2023-09-27 00:00:00
GStreamer H265 Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
2023-09-27 00:00:00
veracode
veracode
Integer Overflow
2023-11-30 16:32:06
Heap Buffer Overflow
2023-11-30 16:32:09
Integer Overflow
2023-11-30 16:32:02
cvelist
cvelist
CVE-2023-40475 GStreamer MXF File Parsing Integer Overflow Remote Code Execution Vulnerability
2024-05-03 02:11:11
CVE-2023-40474 GStreamer MXF File Parsing Integer Overflow Remote Code Execution Vulnerability
2024-05-03 02:11:10
CVE-2023-40476 GStreamer H265 Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
2024-05-03 02:11:12
alpinelinux
alpinelinux
CVE-2023-40474
2024-05-03 03:15:19
CVE-2023-40475
2024-05-03 03:15:20
CVE-2023-40476
2024-05-03 03:15:20
redhatcve
redhatcve
CVE-2023-40475
2023-12-14 18:02:49
CVE-2023-40474
2023-12-14 18:02:57
CVE-2023-40476
2023-12-14 18:03:03
nvd
nvd
CVE-2023-40475
2024-05-03 03:15:20
CVE-2023-40476
2024-05-03 03:15:20
CVE-2023-40474
2024-05-03 03:15:19
ubuntucve
ubuntucve
CVE-2023-40474
2023-09-28 00:00:00
CVE-2023-40475
2023-09-28 00:00:00
CVE-2023-40476
2023-09-28 00:00:00
vulnrichment
vulnrichment
CVE-2023-40474 GStreamer MXF File Parsing Integer Overflow Remote Code Execution Vulnerability
2024-05-03 02:11:10
CVE-2023-40475 GStreamer MXF File Parsing Integer Overflow Remote Code Execution Vulnerability
2024-05-03 02:11:11
debiancve
debiancve
CVE-2023-40474
2024-05-03 03:15:19
CVE-2023-40476
2024-05-03 03:15:20
CVE-2023-40475
2024-05-03 03:15:20
mageia
mageia
Updated gstreamer packages fix many security vulnerabilities
2023-12-22 14:04:51
hp
hp
HP ThinPro 8.1 SP 2 Security Updates
2024-04-12 00:00:00
HP ThinPro 8.0 SP 8 Security Updates
2024-03-01 00:00:00

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

7.2 High

AI Score

Confidence

Low

0.0005 Low

EPSS

Percentile

16.2%

JSON
Related for ELSA-2024-3060
nessus35osv7rocky2debian2openvas27almalinux2amazon1redhat2rosalinux1oraclelinux1ubuntu1photon3cve3zdi3veracode3cvelist3alpinelinux3redhatcve3nvd3ubuntucve3vulnrichment2debiancve3mageia1hp2