CVE-2019-9928

GStreamer before 1.16.0 has a heap-based buffer overflow in the RTSP connection parser via a crafted response from a server, potentially allowing remote code execution...

UBUNTU-CVE-2019-9928

GStreamer before 1.16.0 has a heap-based buffer overflow in the RTSP connection parser via a crafted response from a server, potentially allowing remote code execution...

Remote Code Execution (RCE)

gstreamer-plugins-good is vulnerable to remote code execution RCE attacks. The vulnerability exists as a heap-based buffer overflow in the flxdecodedeltafli function in gst/flx/gstflxdec.c in the FLIC decoder in GStreamer before 1.10.2 allows remote attackers to execute arbitrary code or cause a...

Denial Of Service (DoS)

gstreamer-plugins-bad-free is vulnerable to denial of service DoS attacks. The vulnerability exists as an integer overflow in the vmnc decoder in the gstreamer allows remote attackers to cause a denial of service crash via large width and height values, which triggers a buffer overflow...

Operating System (OS) Detection (RTSP)

RTSP server based Operating System OS detection. Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Security Bulletin: Vulnerabilities in GStreamer affect PowerKVM

Summary PowerKVM is affected by vulnerabilities in GStreamer. IBM has now addressed these vulnerabilities. Vulnerability Details CVEID: CVE-2016-9634 DESCRIPTION: GStreamer is vulnerable to a heap-based buffer overflow, caused by improper bounds checking by the flxdecodedeltafli function in...

gstreamer/gst-discoverer: Heap-buffer-overflow in tap_type_find

Project: https://anongit.freedesktop.org/git/gstreamer/gstreamer Detailed report: https://oss-fuzz.com/testcase?key=5192041649668096 Project: gstreamer Fuzzer: libFuzzergstreamergst-discoverer Fuzz target binary: gst-discoverer Job Type: libfuzzerasangstreamer Platform Id: linux Crash Type:...

gstreamer/typefind: Crash in ebml_parse_chunk

Project: https://anongit.freedesktop.org/git/gstreamer/gstreamer Detailed report: https://oss-fuzz.com/testcase?key=5148902756974592 Project: gstreamer Fuzzer: libFuzzergstreamertypefind Fuzz target binary: typefind Job Type: libfuzzerubsangstreamer Platform Id: linux Crash Type: UNKNOWN READ Cra...

Fedora 26 : webkitgtk4 (2018-43712163de)

This update addresses the following vulnerabilities : - CVE-2018-4088, CVE-2017-13885, CVE-2017-7165, CVE-2017-13884, CVE-2017-7160, CVE-2017-7153, CVE-2017-7161, CVE-2018-4096 Additional fixes : - Fix deadlock in GStreamer video sink during shutdown when accelerated compositing is disabled. -...

gstreamer/gst-discoverer: Negative-size-param in gst_buffer_fill

Project: https://anongit.freedesktop.org/git/gstreamer/gstreamer Detailed report: https://oss-fuzz.com/testcase?key=5822394796081152 Project: gstreamer Fuzzer: libFuzzergstreamergst-discoverer Fuzz target binary: gst-discoverer Job Type: libfuzzerasangstreamer Platform Id: linux Crash Type:...

Security update for webkit2gtk3 (important)

This update for webkit2gtk3 fixes the following issues: Update to version 2.18.5: + Disable SharedArrayBuffers from Web API. + Reduce the precision of "high" resolution time to 1ms. + bsc1075419 - Security fixes: includes improvements to mitigate the effects of Spectre and Meltdown CVE-2017-5753...

openSUSE Security Update : webkit2gtk3 (openSUSE-2018-118) (Meltdown) (Spectre)

This update for webkit2gtk3 fixes the following issues : Update to version 2.18.5 : + Disable SharedArrayBuffers from Web API. + Reduce the precision of 'high' resolution time to 1ms. + bsc1075419 - Security fixes: includes improvements to mitigate the effects of Spectre and Meltdown CVE-2017-575...

Fedora 27 : webkitgtk4 (2018-3199135a7e)

This update addresses the following vulnerabilities : - CVE-2018-4088, CVE-2017-13885, CVE-2017-7165, CVE-2017-13884, CVE-2017-7160, CVE-2017-7153, CVE-2017-7161, CVE-2018-4096 Additional fixes : - Fix deadlock in GStreamer video sink during shutdown when accelerated compositing is disabled. -...

Fedora 27 : webkitgtk4 (2017-06b373d942)

This update addresses the following vulnerabilities : - CVE-2017-13866, CVE-2017-13870, CVE-2017-7156, CVE-2017-13856 Additional fixes : - Make WebDriver implementation more spec compliant. - Fix a bug when trying to remove cookies before a web process is spawned. - WebKitWebDriver process no...

Fedora 26 : webkitgtk4 (2017-0ad0e2f390)

This update addresses the following vulnerabilities : - CVE-2017-13866, CVE-2017-13870, CVE-2017-7156, CVE-2017-13856 Additional fixes : - Make WebDriver implementation more spec compliant. - Fix a bug when trying to remove cookies before a web process is spawned. - WebKitWebDriver process no...

Debian: Security Advisory (DLA-830-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DLA-827-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DLA-829-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MGASA-2018-0014 Updated gstreamer0.10-plugins-ugly/gstreamer1.0-plugins-ugly packages fix security vulnerability

Hanno Boeck discovered multiple vulnerabilities in the GStreamer media framework and its codecs and demuxers, which may result in denial of service or the execution of arbitrary code if a malformed media file is opened CVE-2017-5846, CVE-2017-5847...

MGASA-2018-0013 Updated gstreamer1.0-plugins-bad packages fix security vulnerability

Hanno Boeck discovered multiple vulnerabilities in the GStreamer media framework and its codecs and demuxers, which may result in denial of service or the execution of arbitrary code if a malformed media file is opened CVE-2016-9809, CVE-2017-5843, CVE-2017-5848...