SUSE: Security Advisory (SUSE-SU-2022:3907-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLED12: gstreamer-plugins-base / gstreamer-plugins-base-devel / etc (SUSE-SU-2022:3911-1)

The remote SUSE Linux SLED12 / SLEDSAP12 / SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:3911-1 advisory. - CVE-2021-3522: Fixed frame size check and potential invalid reads bsc1185448. Tenable has extracted the preceding...

RHEL 8 : gstreamer1-plugins-good (RHSA-2022:7618)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:7618 advisory. GStreamer is a streaming media framework based on graphs of filters that operate on media data. The gstreamer1-plugins-good packages contain a...

SUSE-SU-2022:3916-1 Security update for gstreamer-0_10-plugins-base

This update for gstreamer-010-plugins-base fixes the following issues: - CVE-2021-3522: Fixed frame size check and potential invalid reads bsc1185448...

SUSE-SU-2022:3911-1 Security update for gstreamer-plugins-base

This update for gstreamer-plugins-base fixes the following issues: - CVE-2021-3522: Fixed frame size check and potential invalid reads bsc1185448...

SUSE-SU-2022:3908-1 Security update for gstreamer-plugins-good

This update for gstreamer-plugins-good fixes the following issues: - CVE-2022-1920: Fixed integer overflow in WavPack header handling code bsc1201688. - CVE-2022-1921: Fixed integer overflow resulting in heap corruption in avidemux element bsc1201693. - CVE-2022-1922: Fixed integer overflows in m...

SUSE-SU-2022:3907-1 Security update for gstreamer-plugins-base

This update for gstreamer-plugins-base fixes the following issues: - CVE-2021-3522: Fixed ID3v2 tag frame size check and potential invalid reads bsc1185448...

SUSE-SU-2022:3906-1 Security update for gstreamer-0_10-plugins-good

This update for gstreamer-010-plugins-good fixes the following issues: - CVE-2022-1920: Fixed an integer overflow while parsing matroska files bsc1201688. - CVE-2022-1921: Fixed an integer overflow while parsing avi files bsc1201693. - CVE-2022-1922: Fixed an integer overflow during mkv demuxing...

Moderate: Red Hat Security Advisory: gstreamer1-plugins-good security update

An update for gstreamer1-plugins-good is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

gstreamer-plugins-good: Use-after-free in matroska demuxing

GStreamer before 1.18.4 might access already-freed memory in error code paths when demuxing certain malformed Matroska files...

RLSA-2022:7618 Moderate: gstreamer1-plugins-good security update

GStreamer is a streaming media framework based on graphs of filters that operate on media data. The gstreamer1-plugins-good packages contain a collection of well-supported plug-ins of good quality and under the LGPL license. Security Fixes: gstreamer-plugins-good: Use-after-free in matroska...

Moderate: gstreamer1-plugins-good security update

GStreamer is a streaming media framework based on graphs of filters that operate on media data. The gstreamer1-plugins-good packages contain a collection of well-supported plug-ins of good quality and under the LGPL license. Security Fixes: gstreamer-plugins-good: Use-after-free in matroska...

ALSA-2022:7618 Moderate: gstreamer1-plugins-good security update

GStreamer is a streaming media framework based on graphs of filters that operate on media data. The gstreamer1-plugins-good packages contain a collection of well-supported plug-ins of good quality and under the LGPL license. Security Fixes: gstreamer-plugins-good: Use-after-free in matroska...

The vulnerability of the gst_avi_demux_invert function in the Gstreamer multimedia framework allows a hacker to execute arbitrary code.

The vulnerability of the gstavidemuxinvert function in the Gstreamer multimedia framework is caused by a numerical overflow. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the gst_matroska_demux_add_wvpk_header function in the Gstreamer multimedia framework allows a hacker to execute arbitrary code.

The vulnerability of the gstmatroskademuxaddwvpkheader function in the Gstreamer multimedia framework is caused by a numerical overflow. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the qtdemux_inflate function in the Gstreamer multimedia framework allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the qtdemuxinflate function in the Gstreamer multimedia framework is caused by a numerical overflow condition. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the gst_matroska_decompress_data function in the Gstreamer multimedia framework allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the gstmatroskadecompressdata function in the Gstreamer multimedia framework is caused by a numerical overflow. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the gst_matroska_decompress_data function in the Gstreamer multimedia framework, which allows a hacker to cause a service failure

The vulnerability of the gstmatroskadecompressdata function in the Gstreamer multimedia framework is caused by a numerical overflow. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2022-36706 · Git +1 · Gstreamer

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ 1 crash has been reported. The crash involves the functions parse subrip, parse webvtt, and gst sub parse chain...

CVE-2022-2122

A flaw was found in GStreamer. An integer overflow can lead to a heap-based buffer overflow in the qt demuxer when processing a specially crafted QuickTime/MP4 file using zlib decompression. This vulnerability can result in application crash, memory corruption, and code execution...