13 matches found
Fedora 44 : mingw-gstreamer1 / mingw-gstreamer1-plugins-bad-free / etc (2026-d5e9ea2b8c)
The remote Fedora 44 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-d5e9ea2b8c advisory. Update to gstreamer-1.28.7. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested...
MiracleLinux 8 : gstreamer1-plugins-base-1.16.1-7.el8_10 (AXSA:2026-1837:02)
The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1837:02 advisory. gstreamer1-plugins-base: gstreamer: NULL/invalid-pointer dereference in gstrtspmessageparseauthcredentials when parsing a crafted Digest...
Moderate: gstreamer1-plugins-base security update
GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-base packages contain a collection of well-maintained base plug-ins. Security Fixes: gstreamer1-plugins-base: gstreamer: NULL/invalid-pointer dereference in...
Oracle Linux 8 : ELSA-2026-67145-0: / gstreamer1-plugins-base (ELSA-2026-671450)
The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-671450 advisory. - Add patch for CVE-2026-85150 Resolves: RHEL-253741 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...
AlmaLinux 8 : gstreamer1-plugins-base (ALSA-2026:67145)
The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:67145 advisory. gstreamer1-plugins-base: gstreamer: NULL/invalid-pointer dereference in gstrtspmessageparseauthcredentials when parsing a crafted Digest...
gstreamer1-plugins-base security update
1.16.1-7.0.1 - Update origin URL Orabug: 36209826 1.16.1-7 - Add patch for CVE-2026-85150 Resolves: RHEL-253741 1.16.1-6.1 - Add patch for CVE-2026-18297 Resolves: RHEL-246576...
ROOT-OS-DEBIAN-13-CVE-2026-85150 CVE-2026-85150 in gst-plugins-base1.0 - Patched by Root
Root has patched CVE-2026-85150 in the gst-plugins-base1.0 package for Root:Debian:13. Multiple fixed versions available...
Moderate: Red Hat Security Advisory: gstreamer1-plugins-base security update
An update for gstreamer1-plugins-base is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
AlmaLinux 10 : gstreamer1-plugins-base (ALSA-2026:66460)
The remote AlmaLinux 10 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:66460 advisory. gstreamer1-plugins-base: gstreamer: NULL/invalid-pointer dereference in gstrtspmessageparseauthcredentials when parsing a crafted Digest...
gstreamer1-plugins-base security update
1.26.7-2.2 - Fix crash in RTSP auth credential parsing CVE-2026-85150 Resolves: RHEL-253746...
RockyLinux 10 : gstreamer1-plugins-base (RLSA-2026:66460)
The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:66460 advisory. gstreamer1-plugins-base: gstreamer: NULL/invalid-pointer dereference in gstrtspmessageparseauthcredentials when parsing a crafted Digest...
DEBIAN-CVE-2026-85150
A NULL pointer dereference flaw was found in GStreamer's RTSP support library. The vulnerability occurs while parsing an Authorization or WWW-Authenticate header that uses Digest authentication. Specially crafted whitespace placement around a parameter's terminator can cause an internal length...
