openSUSE Security Update : PackageKit (openSUSE-2020-2344)

This update for PackageKit fixes the following issue : - CVE-2020-16121: Fixed an Information disclosure in InstallFiles, GetFilesLocal and GetDetailsLocal bsc1176930. - Update summary and description of gstreamer-plugin and gtk3-module. bsc1104313 This update was imported from the...

CVE-2021-3185

A flaw was found in the gstreamer h264 component where when parsing a h264 header, an attacker could cause the stack to be smashed, memory corruption to occur, and possibly code execution...

Debian DLA-2528-1 : gst-plugins-bad1.0 security update

Andrew Wesie discovered a buffer overflow in the H264 support of the GStreamer multimedia framework, which could potentially result in the execution of arbitrary code. For Debian 9 stretch, this problem has been fixed in version 1.10.4-1+deb9u1. We recommend that you upgrade your gst-plugins-bad1...

Debian: Security Advisory (DLA-2528-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 2528-1] gst-plugins-bad1.0 security update

----------------------------------------------------------------------- Debian LTS Advisory DLA-2528-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta January 19, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 4833-1] gst-plugins-bad1.0 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4833-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff January 18, 2021 https://www.debian.org/security/faq -...

OPENSUSE-SU-2020:2344-1 Security update for PackageKit

This update for PackageKit fixes the following issue: - CVE-2020-16121: Fixed an Information disclosure in InstallFiles, GetFilesLocal and GetDetailsLocal bsc1176930. - Update summary and description of gstreamer-plugin and gtk3-module. bsc1104313 This update was imported from the...

SUSE SLED15 / SLES15 Security Update : PackageKit (SUSE-SU-2020:3911-1)

This update for PackageKit fixes the following issue : CVE-2020-16121: Fixed an Information disclosure in InstallFiles, GetFilesLocal and GetDetailsLocal bsc1176930. Update summary and description of gstreamer-plugin and gtk3-module. bsc1104313 Note that Tenable Network Security has extracted the...

SUSE-SU-2020:3911-1 Security update for PackageKit

This update for PackageKit fixes the following issue: - CVE-2020-16121: Fixed an Information disclosure in InstallFiles, GetFilesLocal and GetDetailsLocal bsc1176930. - Update summary and description of gstreamer-plugin and gtk3-module. bsc1104313...

ProCaster LE-32F430 GStreamer souphttpsrc libsoup/2.51.3 Stack Overflow Exploit

ProCaster LE-32F430 SmartTV remote code execution exploit that leverages a stack overflow vulnerability in GStreamer souphttpsrc libsoup version 2.51.3. !/bin/sh ProCaster LE-32F430 NotSoSmartTV remote code execution exploit through GStreamer souphttpsrc libsoup/2.51.3 HTTP stack overflow...

ProCaster LE-32F430 GStreamer souphttpsrc libsoup/2.51.3 Stack Overflow

!/bin/sh ProCaster LE-32F430 NotSoSmartTV remote code execution exploit through GStreamer souphttpsrc libsoup/2.51.3 HTTP stack overflow CVE-2017-2885 def 2020-02-15 ................. 850day exploit lol Exploit payload: ret2libc system nc reverse shell with a clean exit CMD="$CMD:-/bin/busybox nc...

RHEL 8 : GStreamer, libmad, and SDL (RHSA-2020:1631)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:1631 advisory. The GStreamer library provides a streaming media framework based on graphs of media data filters. The libmad package is an MPEG audio decoder capable...

PT-2021-2237 · Gstreamer +3 · Gst-Plugins-Bad +3

Name of the Vulnerable Software and Affected Versions: gst-plugins-bad versions prior to 1.18.1 Description: A flaw was found in the gstreamer h264 component where when parsing a h264 header, an attacker could cause the stack to be smashed, memory corruption and possibly code execution. The...

GLSA-202009-05 : GStreamer RTSP Server: Denial of service

The remote host is affected by the vulnerability described in GLSA-202009-05 GStreamer RTSP Server: Denial of service It was discovered that GStreamer RTSP Server did not properly handle authentication. Impact : A remote attacker, by sending specially crafted authentication requests, could possib...

GStreamer RTSP Server: Denial of service

Background RTSP server library based on GStreamer. Description It was discovered that GStreamer RTSP Server did not properly handle authentication. Impact A remote attacker, by sending specially crafted authentication requests, could possibly cause a Denial of Service condition. Workaround There ...

openSUSE Security Update : MozillaFirefox (openSUSE-2020-1189)

This update for MozillaFirefox fixes the following issues : This update for MozillaFirefox and pipewire fixes the following issues : MozillaFirefox Extended Support Release 78.1.0 ESR - Fixed: Various stability, functionality, and security fixes bsc1174538 - CVE-2020-15652: Potential leak of...

Remote Code Execution

gst-plugins-base is vulnerable to remote code execution. The vulnerability exists as GStreamer before 1.16.0 has a heap-based buffer overflow in the RTSP connection parser via a crafted response from a server...

SUSE SLED15 / SLES15 Security Update : gstreamer-plugins-base (SUSE-SU-2020:1300-2)

This update for gstreamer-plugins-base fixes the following issue : Security issue fixed : CVE-2019-9928: Fixed a heap-based overflow in the rtsp connection parser bsc1133375. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory...

SUSE-SU-2020:1300-2 Security update for gstreamer-plugins-base

This update for gstreamer-plugins-base fixes the following issue: Security issue fixed: - CVE-2019-9928: Fixed a heap-based overflow in the rtsp connection parser bsc1133375...

gstreamer-devel.966125.n4.nabble.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1181425 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...