Lucene search
UbuntuUSN-6798-1HistoryMay 29, 2024 - 12:00 a.m.
GStreamer Base Plugins vulnerability
2024-05-2900:00:00
ubuntu.com
3
ubuntu
gstreamer base plugins
exif metadata
arbitrary code
crash
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
7.8 High
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
16.0%
Releases
- Ubuntu 24.04 LTS
- Ubuntu 23.10
- Ubuntu 22.04 LTS
- Ubuntu 20.04 LTS
Packages
- gst-plugins-base1.0 - GStreamer plugins
Details
It was discovered that GStreamer Base Plugins incorrectly handled certain
EXIF metadata. An attacker could possibly use this issue to execute arbitrary
code or cause a crash.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 24.04 | noarch | gstreamer1.0-plugins-base | < 1.24.2-1ubuntu0.1 | UNKNOWN |
| Ubuntu | 24.04 | noarch | gir1.2-gst-plugins-base-1.0 | < 1.24.2-1ubuntu0.1 | UNKNOWN |
| Ubuntu | 24.04 | noarch | gstreamer1.0-alsa | < 1.24.2-1ubuntu0.1 | UNKNOWN |
| Ubuntu | 24.04 | noarch | gstreamer1.0-alsa-dbgsym | < 1.24.2-1ubuntu0.1 | UNKNOWN |
| Ubuntu | 24.04 | noarch | gstreamer1.0-gl | < 1.24.2-1ubuntu0.1 | UNKNOWN |
| Ubuntu | 24.04 | noarch | gstreamer1.0-gl-dbgsym | < 1.24.2-1ubuntu0.1 | UNKNOWN |
| Ubuntu | 24.04 | noarch | gstreamer1.0-plugins-base-apps | < 1.24.2-1ubuntu0.1 | UNKNOWN |
| Ubuntu | 24.04 | noarch | gstreamer1.0-plugins-base-apps-dbgsym | < 1.24.2-1ubuntu0.1 | UNKNOWN |
| Ubuntu | 24.04 | noarch | gstreamer1.0-plugins-base-dbgsym | < 1.24.2-1ubuntu0.1 | UNKNOWN |
| Ubuntu | 24.04 | noarch | gstreamer1.0-x | < 1.24.2-1ubuntu0.1 | UNKNOWN |
References
Related
zdi
zdi
openvas
openvas
Ubuntu: Security Advisory (USN-6798-1)
2024-05-30 00:00:00
Debian: Security Advisory (DLA-3824-1)
2024-05-31 00:00:00
openSUSE: Security Advisory for gstreamer (SUSE-SU-2024:1882-1)
2024-06-05 00:00:00
ubuntucve
ubuntucve
CVE-2024-4453
2024-05-23 00:00:00
debiancve
debiancve
CVE-2024-4453
2024-05-22 20:15:09
osv
osv
gst-plugins-base1.0 vulnerability
2024-05-29 14:58:02
gst-plugins-base1.0 - security update
2024-05-30 00:00:00
CVE-2024-4453
2024-05-22 20:15:09
nessus
nessus
Debian dsa-5702 : gir1.2-gst-plugins-base-1.0 - security update
2024-06-03 00:00:00
vulnrichment
vulnrichment
debian
debian
[SECURITY] [DSA 5702-1] gst-plugins-base1.0 security update
2024-06-01 07:21:04
[SECURITY] [DLA 3824-1] gst-plugins-base1.0 security update
2024-05-30 20:59:31
cvelist
cvelist
nvd
nvd
CVE-2024-4453
2024-05-22 20:15:09
mageia
mageia
Updated 0-plugins-base packages fix security vulnerability
2024-06-08 19:34:17
cve
cve
CVE-2024-4453
2024-05-22 20:15:09
redhatcve
redhatcve
CVE-2024-4453
2024-05-23 14:56:41
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
7.8 High
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
16.0%
Related for USN-6798-1