Fedora: Security Advisory for python-gstreamer1 (FEDORA-2023-7bd66f219f)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory for gstreamer1-doc (FEDORA-2023-7bd66f219f)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Critical Photon OS Security Update - PHSA-2023-4.0-0523

Updates of 'gstreamer', 'samba-client' packages of Photon OS have been released...

Heap-based Buffer Overflow

gst-plugins-bad gstreamer: AV1 codec parser is vulnerable to Heap-based Buffer Overflow. The vulnerability is caused due to a failure in handling / processing certain malformed streams. A malicious user can use this flaw to trigger a crash in the application and possibly affect code execution...

Use After Free

gst-plugins-bad MXF demuxer in GStreamer is vulnerable to Use After Free. The vulnerability is caused when handling certain MXF video files which can allow an attacker to trigger a crash in the application and may allow code execution...

Integer Overflow

gst-plugins-ugly GStreamer is vulnerable to Integer Overflow. The vulnerability is caused due to an integer overflow within the parsing of MDPR chunks. A remote attacker can pass specially crafted data to the application triggering integer overflow and execute arbitrary code on the target system...

Heap Buffer Overflow

gst-plugins-bad GStreamer is vulnerable to Heap Buffer Overflow. The vulnerability is caused when handling malformed files with an uncompressed video. This could allow a malicious user to cause an integer overflow before allocating the buffer, triggering a crash or code execution via heap...

[SECURITY] Fedora 38 Update: python-gstreamer1-1.22.7-1.fc38

This module contains PyGObject overrides to make it easier to write applications that use GStreamer 1.x in Python...

[SECURITY] Fedora 38 Update: gst-devtools-1.22.7-1.fc38

Development and debugging tools for GStreamer...

[SECURITY] Fedora 38 Update: gstreamer1-doc-1.22.7-1.fc38

GStreamer documentation...

Debian: Security Advisory (DLA-3673-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability of the MXF-file parsers of the Gstreamer multimedia framework allows a hacker to execute arbitrary code.

The vulnerability of Gstreamer’s MXF files parser is related to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability relates to the AV1 parser for subtitle analysis, subparse, and the Gstreamer multimedia framework. This allows attackers to execute arbitrary code.

The vulnerability of the AV1 codec parser, subtitles analysis module, and subparse in the Gstreamer multimedia framework is related to buffer overflow attacks. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code...

Ubuntu: Security Advisory (USN-6526-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-6526-1: GStreamer Bad Plugins vulnerabilities

It was discovered that GStreamer Bad Plugins incorrectly handled certain media files. A remote attacker could use this issue to cause GStreamer Bad Plugins to crash, resulting in a denial of service, or possibly execute arbitrary code...

USN-6526-1 gst-plugins-bad1.0 vulnerabilities

It was discovered that GStreamer Bad Plugins incorrectly handled certain media files. A remote attacker could use this issue to cause GStreamer Bad Plugins to crash, resulting in a denial of service, or possibly execute arbitrary code...

SUSE SLES12: gstreamer-plugins-bad / gstreamer-plugins-bad-devel / etc (SUSE-SU-2023:4597-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:4597-1 advisory. - CVE-2023-40474: Fixed integer overflow causing out of bounds writes when handling invalid uncompressed video bsc1215796. -...

Ubuntu 20.04 LTS / 22.04 LTS / 23.04 / 23.10 : GStreamer Bad Plugins vulnerabilities (USN-6526-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS / 23.04 / 23.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6526-1 advisory. It was discovered that GStreamer Bad Plugins incorrectly handled certain media files. A remote attacker could use this issue ...

SUSE: Security Advisory (SUSE-SU-2023:4594-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2023:4595-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...