Lucene search
+L

114 matches found

OSV
OSV
added 2024/05/03 2:15 a.m.10 views

AZL-43777 CVE-2023-37329 affecting package gstreamer1-plugins-base 1.20.0-3

GStreamer SRT File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may va...

8.8CVSS7.3AI score0.01643EPSS
SaveExploits0References1
NVD
NVD
added 2024/05/03 2:15 a.m.20 views

CVE-2023-37329

GStreamer SRT File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may va...

8.8CVSS8.9AI score0.01643EPSS
SaveExploits0References3
OSV
OSV
added 2024/05/03 2:15 a.m.2 views

DEBIAN-CVE-2023-37329

GStreamer SRT File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may va...

8.8CVSS7.7AI score0.01643EPSS
SaveExploits0References1
OSV
OSV
added 2024/05/03 2:15 a.m.10 views

AZL-44187 CVE-2023-37329 affecting package gstreamer1-plugins-base 1.20.0-3

GStreamer SRT File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may va...

8.8CVSS7.3AI score0.01643EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/05/03 1:58 a.m.25 views

CVE-2023-37329 GStreamer SRT File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

GStreamer SRT File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may va...

8.8CVSS7.6AI score0.01643EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/05/03 1:58 a.m.42 views

CVE-2023-37329 GStreamer SRT File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

GStreamer SRT File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may va...

8.8CVSS8.7AI score0.01643EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2024/05/03 1:58 a.m.72 views

CVE-2023-37329

GStreamer SRT File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may va...

8.8CVSS7.7AI score0.01643EPSS
SaveExploits0
OSV
OSV
added 2024/05/03 1:58 a.m.14 views

CVE-2023-37329 GStreamer SRT File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

GStreamer SRT File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may va...

8.8CVSS7.4AI score0.01643EPSS
SaveExploits0References5
AlpineLinux
AlpineLinux
added 2024/05/03 1:58 a.m.40 views

CVE-2023-37329

GStreamer SRT File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may va...

8.8CVSS8.6AI score0.01643EPSS
SaveExploits0
OSV
OSV
added 2024/04/12 11:7 a.m.5 views

OESA-2024-1457 gstreamer1-plugins-base security update

GStreamer is a graphics library for built-in media processing components. BasePlug-ins is a the collections used to maintain the GStreamer plugin. Security Fixes: Heap-based buffer overflow in the subparse subtitle parser when handling certain SRT subtitle files in GStreamer versions before 1.22....

8.8CVSS8.1AI score0.02052EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2024/03/04 12:0 a.m.15 views

openSUSE: Security Advisory for gstreamer (SUSE-SU-2023:3220-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS7.1AI score0.01643EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2024/03/04 12:0 a.m.17 views

openSUSE: Security Advisory for gstreamer (openSUSE-SU-2023:0379-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS7.1AI score0.01643EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2023/12/14 6:1 p.m.35 views

CVE-2023-37328

A heap-based buffer overflow was found in the subparse subtitle parser of GStreamer when processing specific SRT subtitle files. This issue could allow a malicious third party to crash the application and execute code through manipulation of the heap. Mitigation Mitigation for this issue is eithe...

5.5CVSS7.4AI score0.02052EPSS
SaveExploits0References4
Prion
Prion
added 2023/10/16 5:15 p.m.17 views

Path traversal

Lack of sufficient path validation in South River Technologies' Titan MFT and Titan SFTP servers on Linux allows an authenticated attacker to get the size of an arbitrary file on the filesystem using path traversal in the ftp "SIZE" command...

4CVSS5.7AI score0.01481EPSS
SaveExploits3References2Affected Software2
Redos
Redos
added 2023/09/18 12:0 a.m.34 views

ROS-20230915-11

A vulnerability in the Base plugin gst-plugins-base of the Gstreamer multimedia framework is related to a buffer overrun during the parsing and decoding of subtitles from SRT files. operation outside the memory buffer when parsing and decoding subtitles from SRT files. Exploitation exploitation o...

8.8CVSS7.3AI score0.01643EPSS
SaveExploits0
Openbugbounty
Openbugbounty
added 2023/09/09 7:52 a.m.12 views

srt-microceramique.com Cross Site Scripting vulnerability OBB-3657501

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.1AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2023/08/02 12:0 a.m.10 views

The vulnerability of the Base plugin (gst-plugins-base) in the Gstreamer multimedia framework allows a hacker to execute arbitrary code.

The vulnerability of the Base plugin gst-plugins-base of the Gstreamer multimedia framework is related to the issue where operations occur outside the buffer boundaries in memory during the parsing and decoding of SRT subtitle files. Exploiting this vulnerability allows a remote attacker to execu...

10CVSS7.4AI score0.01643EPSS
SaveExploits0References9Affected Software3
UbuntuCve
UbuntuCve
added 2023/07/31 12:0 a.m.27 views

CVE-2023-37329

GStreamer SRT File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may va...

8.8CVSS7.1AI score0.01643EPSS
SaveExploits0References5
Zero Day Initiative
Zero Day Initiative
added 2023/07/06 12:0 a.m.36 views

GStreamer SRT File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the parsing of SRT...

8.8CVSS7.1AI score0.01643EPSS
SaveExploits0References1
CVE
CVE
added 2023/06/12 4:30 p.m.96 views

CVE-2023-34105

SRS (Simple Real-time Server) api-server is vulnerable to drive-by command injection on POST /api/v1/snapshots in versions prior to 5.0.157, 5.0-b1, and 6.0.48, potentially leading to Remote Code Execution (RCE). Connected advisories confirm a fix in 5.0.157, 5.0-b1, and 6.0.48. Mitigate by updat...

7.5CVSS8.2AI score0.0876EPSS
SaveIn wildExploits1References3Affected Software1
Rows per page
Query Builder