Lucene search

K
oraclelinuxOracleLinuxELSA-2024-3088
HistoryMay 23, 2024 - 12:00 a.m.

gstreamer1-plugins-base security update

2024-05-2300:00:00
linux.oracle.com
2
gstreamer1-plugins-base update cve-2023-37328 heap overwrite subtitle parsing resolves rhel-19472_unix origin url orabug 36209826.

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

6.9 Medium

AI Score

Confidence

Low

0.0005 Low

EPSS

Percentile

16.2%

[1.16.1-3.0.1]

  • Update origin URL [Orabug: 36209826]
    [1.16.1-3]
  • CVE-2023-37328 gstreamer1-plugins-base: heap overwrite in subtitle parsing
  • Resolves: RHEL-19472

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

6.9 Medium

AI Score

Confidence

Low

0.0005 Low

EPSS

Percentile

16.2%