Integer Overflow

🗓️ 30 Nov 2023 16:32:02Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 27 Views

Integer overflow vulnerability in gst-plugins-bad:edge allows remote code execution

Reporter	Title	Published	Views	Family All 104
Tenable Nessus	Amazon Linux 2 : gstreamer1-plugins-bad-free (ALAS-2023-2298)	20 Oct 202300:00	–	nessus
Tenable Nessus	Alibaba Cloud Linux 3 : 0134: gstreamer1-plugins-bad-free (ALINUX3-SA-2024:0134)	14 May 202500:00	–	nessus
Tenable Nessus	CentOS 8 : gstreamer1-plugins-bad-free (CESA-2024:3060)	22 May 202400:00	–	nessus
Tenable Nessus	Debian dla-3633 : gir1.2-gst-plugins-bad-1.0 - security update	29 Oct 202300:00	–	nessus
Tenable Nessus	Debian DSA-5533-1 : gst-plugins-bad1.0 - security update	25 Oct 202300:00	–	nessus
Tenable Nessus	GLSA-202406-06 : GStreamer, GStreamer Plugins: Multiple Vulnerabilities	29 Jun 202400:00	–	nessus
Tenable Nessus	MiracleLinux 9 : gstreamer1-plugins-bad-free-1.22.1-4.el9 (AXSA:2024-8037:03)	20 Jan 202600:00	–	nessus
Tenable Nessus	MiracleLinux 8 : gstreamer1-plugins-bad-free-1.16.1-4.el8 (AXSA:2024-8316:04)	20 Jan 202600:00	–	nessus
Tenable Nessus	openSUSE 15 Security Update : gstreamer-plugins-bad (openSUSE-SU-2023:0409-1)	20 Dec 202300:00	–	nessus
Tenable Nessus	Oracle Linux 9 : gstreamer1-plugins-bad-free (ELSA-2024-2287)	6 May 202400:00	–	nessus

Vulners

Node

freedesktop gst-plugins-badMatch1.20.3-r4os

AND

freedesktop gst-plugins-badMatch1.20.4-r2os

AND

freedesktop gst-plugins-badMatch1.16.2-r6os

AND

freedesktop gst-plugins-badMatch1.20.2-r0os

AND

freedesktop gst-plugins-badMatch1.22.3-r0os

AND

freedesktop gst-plugins-badMatch1.22.4-r0os

AND

freedesktop gst-plugins-badMatch1.18.5-r2os

AND

freedesktop gst-plugins-badMatch1.18.4-r1os

AND

freedesktop gst-plugins-badMatch1.20.5-r0os

AND

freedesktop gst-plugins-badMatch1.20.3-r3os

AND

freedesktop gst-plugins-badMatch1.18.4-r0os

AND

freedesktop gst-plugins-badMatch1.22.0-r0os

AND

freedesktop gst-plugins-badMatch1.20.5-r1os

AND

freedesktop gst-plugins-badMatch1.22.2-r0os

AND

freedesktop gst-plugins-badMatch1.18.4-r3os

AND

freedesktop gst-plugins-badMatch1.18.5-r1os

AND

freedesktop gst-plugins-badMatch1.22.3-r3os

AND

freedesktop gst-plugins-badMatch1.22.5-r0os

AND

freedesktop gst-plugins-badMatch1.22.2-r1os

AND

freedesktop gst-plugins-badMatch1.16.2-r8os

AND

freedesktop gst-plugins-badMatch1.18.5-r0os

AND

freedesktop gst-plugins-badMatch1.22.1-r0os

AND

freedesktop gst-plugins-badMatch1.18.6-r0os

AND

freedesktop gst-plugins-badMatch1.18.3-r1os

AND

freedesktop gst-plugins-badMatch1.18.4-r2os

AND

freedesktop gst-plugins-badMatch1.18.4-r4os

AND

freedesktop gst-plugins-badMatch1.20.3-r1os

AND

freedesktop gst-plugins-badMatch1.20.1-r0os

AND

freedesktop gst-plugins-badMatch1.16.2-r9os

AND

freedesktop gst-plugins-badMatch1.20.4-r1os

AND

freedesktop gst-plugins-badMatch1.16.2-r7os

AND

freedesktop gst-plugins-badMatch1.20.3-r0os

AND

freedesktop gst-plugins-badMatch1.20.4-r0os

AND

freedesktop gst-plugins-badMatch1.22.3-r1os

AND

alpinelinux alpine_linuxMatchedge

freedesktop gst-plugins-badMatch1.22.5-r0os

AND

freedesktop gst-plugins-badMatch1.22.4-r0os

AND

freedesktop gst-plugins-badMatch1.22.3-r0os

AND

freedesktop gst-plugins-badMatch1.22.2-r0os

AND

freedesktop gst-plugins-badMatch1.22.2-r1os

AND

alpinelinux alpine_linuxMatch3.18

Source	Link
secdb	www.secdb.alpinelinux.org/v3.18/community.yaml
secdb	www.secdb.alpinelinux.org/edge/community.yaml
gstreamer	www.gstreamer.freedesktop.org/security/sa-2023-0008.html
zerodayinitiative	www.zerodayinitiative.com/advisories/ZDI-23-1458/

03 May 2024 06:00Current

7.6High risk

Vulners AI Score7.6

CVSS 38.8

EPSS0.06219

SSVC