Lucene search

K
oraclelinuxOracleLinuxELSA-2024-3089
HistoryMay 23, 2024 - 12:00 a.m.

gstreamer1-plugins-good security update

2024-05-2300:00:00
linux.oracle.com
1
gstreamer1-plugins-good
security update
version 1.16.1-4
integer overflow
heap overwrite
flac image tag handling
rhel-19469
unix

7.6 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H

7.2 High

AI Score

Confidence

Low

0.0005 Low

EPSS

Percentile

16.3%

[1.16.1-4]

  • CVE-2023-37327: integer overflow leading to heap overwrite in
    FLAC image tag handling
  • Resolves: RHEL-19469

7.6 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H

7.2 High

AI Score

Confidence

Low

0.0005 Low

EPSS

Percentile

16.3%