Moderate: gstreamer1-plugins-base security update

GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-base packages contain a collection of well-maintained base plug-ins. Security Fixes: gstreamer-plugins-base: heap overwrite in subtitle parsing CVE-2023-37328 For more details...

Moderate: gstreamer1-plugins-good security update

GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages contain a collection of well-supported plug-ins of good quality and under the LGPL license. Security Fixes: gstreamer-plugins-good: integer overflow leading to hea...

ALSA-2024:2302 Moderate: gstreamer1-plugins-base security update

GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-base packages contain a collection of well-maintained base plug-ins. Security Fixes: gstreamer-plugins-base: heap overwrite in subtitle parsing CVE-2023-37328 For more details...

openSUSE: Security Advisory for gstreamer (SUSE-SU-2023:3249-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CentOS 9 : gstreamer1-plugins-good-1.18.4-6.el9

The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the gstreamer1-plugins-good-1.18.4-6.el9 build changelog. - Integer overflow in matroskademux element in gstmatroskademuxaddwvpkheader function which allows a heap overwrite while...

CVE-2022-23086

Handlers for CFGPAGE read / write ioctls in the mpr, mps, and mpt drivers allocated a buffer of a caller-specified size, but copied to it a fixed size header. Other heap content would be overwritten if the specified size was too small. Users with access to the mpr, mps or mpt device node may...

SUSE SLES12: gstreamer / gstreamer-devel / gstreamer-lang / gstreamer-utils / etc (SUSE-SU-2024:0307-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:0307-1 advisory. - CVE-2023-40474: Fixed an integer overflow during MXF file parsing bsc1215796. Tenable has extracted the preceding description block direct...

SUSE SLED15: gstreamer-plugins-bad / gstreamer-plugins-bad-chromaprint / etc (SUSE-SU-2024:0005-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:0005-1 advisory. - CVE-2023-44446: Fixed GStreamer MXF File Parsing Use-After-Free bsc1217213. - CVE-2023-40475: Fixed GStreame...

SUSE SLES12: gstreamer / gstreamer-devel / gstreamer-lang / gstreamer-utils / etc (SUSE-SU-2023:4982-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:4982-1 advisory. - CVE-2023-40474: Fixed GStreamer MXF File Parsing Integer Overflow bsc1215796. Tenable has extracted the preceding description block direct...

SUSE SLES15: gstreamer / gstreamer-devel / gstreamer-lang / gstreamer-utils / etc (SUSE-SU-2023:4980-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:4980-1 advisory. - CVE-2023-40474: Fixed GStreamer MXF File Parsing Integer Overflow bsc1215796. Tenable has extracted the preceding description block direct...

SUSE SLES12: gstreamer-plugins-bad / gstreamer-plugins-bad-devel / etc (SUSE-SU-2023:4972-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:4972-1 advisory. - CVE-2023-40475: Fixed GStreamer MXF File Parsing Integer Overflow bsc1215792. Tenable has extracted the preceding description block direct...

SUSE SLES15: gstreamer-plugins-bad / gstreamer-plugins-bad-chromaprint / etc (SUSE-SU-2023:4971-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:4971-1 advisory. - CVE-2023-44446: Fixed GStreamer MXF File Parsing Use-After-Free bsc1217213. - CVE-2023-40475: Fixed GStreamer MXF File Parsing...

Fedora 38 : mingw-gstreamer1 / mingw-gstreamer1-plugins-bad-free / etc (2023-0984b63b23)

The remote Fedora 38 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2023-0984b63b23 advisory. Update to 1.22.7, fixes CVE-2023-37327, CVE-2023-37328, CVE-2023-37329. Tenable has extracted the preceding description block directly from the Fedo...

SUSE SLES15: gstreamer-plugins-bad / gstreamer-plugins-bad-chromaprint / etc (SUSE-SU-2023:4947-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:4947-1 advisory. CVE-2023-40475: Fixed GStreamer MXF File Parsing Integer Overflow bsc1215792. Tenable has extracted the preceding description block directly...

SUSE SLED15: gstreamer-plugins-bad / gstreamer-plugins-bad-chromaprint / etc (SUSE-SU-2023:4943-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:4943-1 advisory. - CVE-2023-40475: Fixed GStreamer MXF File Parsing Integer Overflow bsc1215792. - CVE-2023-44446: Fixed...

Integer Overflow

gst-plugins-good is vulnerable to Integer Overflow. The vulnerability exists in the avidemux element within the gstavidemuxinvert function, allowing a heap overwrite during the parsing of AVI files. This poses a potential risk of arbitrary code execution through the heap overwrite...

Denial Of Service (DoS)

gst-plugins-good is vulnerable to Denial Of Service DoS. The vulnerability arises from an integer overflow in the matroskademux element within the bzip decompression function, leading to a potential segmentation fault or the risk of a heap overwrite...

Denial Of Service (DoS)

gst-plugins-good is vulnerable to Denial Of Service DoS. The vulnerability arises from an integer overflow in the matroskademux element within the gstmatroskadecompressdata function, leading to a potential segmentation fault or the risk of a heap overwrite...

Denial Of Service (DoS)

gst-plugins-good is vulnerable to Denial Of Service DoS. The vulnerability stems from an integer overflow in the matroskademux element within the gstmatroskadecompressdata function, attributed to the absence of size checks. This issue results in a heap overwrite during MKV demuxing using...

Integer Overflow

gst-plugins-bad:edge is vulnerable to Integer overflow. The vulnerability due to leading to heap overwrite in MXF file handling with AES3 audio. It allow an attacker to execute integer overflow...