Red Hat Security AdvisoryRHSA-2016:2975
gstreamer-plugins-good security update
Released 2016-12-21 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) gstreamer-plugins-good-0.10.23-4.el6_8
- Red Hat Enterprise Linux Desktop Optional (v. 6) gstreamer-plugins-good-devel-0.10.23-4.el6_8
- Red Hat Enterprise Linux HPC Node Optional (v. 6) gstreamer-plugins-good-0.10.23-4.el6_8, gstreamer-plugins-good-devel-0.10.23-4.el6_8
- Red Hat Enterprise Linux Server (v. 6) gstreamer-plugins-good-0.10.23-4.el6_8, gstreamer-plugins-good-0.10.23-4.el6_8.ppc
- Red Hat Enterprise Linux Server Optional (v. 6) gstreamer-plugins-good-devel-0.10.23-4.el6_8, gstreamer-plugins-good-devel-0.10.23-4.el6_8.ppc
- Red Hat Enterprise Linux Workstation (v. 6) gstreamer-plugins-good-0.10.23-4.el6_8
- Red Hat Enterprise Linux Workstation Optional (v. 6) gstreamer-plugins-good-devel-0.10.23-4.el6_8
Fixes 5 records
Priority MEDIUM 53
Heap-based buffer overflow in the flx_decode_delta_fli function in gst/flx/gstflxdec.c in the FLIC decoder in GStreamer before 1.10.2 allows remote attackers to execute arbitrary code or cause a denial of service (applic…
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.08334 · Published 2017-01-27 · Partial fix CWE-119
Priority MEDIUM 53
Heap-based buffer overflow in the flx_decode_delta_fli function in gst/flx/gstflxdec.c in the FLIC decoder in GStreamer before 1.10.2 allows remote attackers to execute arbitrary code or cause a denial of service (applic…
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.08839 · Published 2017-01-27 · Partial fix CWE-119
Priority MEDIUM 53
Heap-based buffer overflow in the flx_decode_delta_fli function in gst/flx/gstflxdec.c in the FLIC decoder in GStreamer before 1.10.2 allows remote attackers to execute arbitrary code or cause a denial of service (applic…
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.08839 · Published 2017-01-27 · Partial fix CWE-119
Priority MEDIUM 41
The FLIC decoder in GStreamer before 1.10.2 allows remote attackers to cause a denial of service (out-of-bounds write and crash) via a crafted series of skip and count pairs.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.05063 · Published 2017-01-13 · Partial fix CWE-787
Priority LOW 30
The flx_decode_chunks function in gst/flx/gstflxdec.c in GStreamer before 1.10.2 allows remote attackers to cause a denial of service (invalid memory read and crash) via a crafted FLIC file.
CVSS 3.0MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.0252 · Published 2017-01-13 · Partial fix CWE-125
THREATIST.IORead the docs