Red Hat Security AdvisoryRHSA-2017:0018
gstreamer-plugins-bad-free security update
Released 2017-01-05 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) gstreamer-plugins-bad-free-0.10.23-22.el7_3
- Red Hat Enterprise Linux Client Optional (v. 7) gstreamer-plugins-bad-free-devel-0.10.23-22.el7_3, gstreamer-plugins-bad-free-devel-docs-0.10.23-22.el7_3
- Red Hat Enterprise Linux Server (v. 7) gstreamer-plugins-bad-free-0.10.23-22.el7_3, gstreamer-plugins-bad-free-0.10.23-22.el7_3.ppc
- Red Hat Enterprise Linux Server Optional (v. 7) gstreamer-plugins-bad-free-devel-0.10.23-22.el7_3, gstreamer-plugins-bad-free-devel-0.10.23-22.el7_3.ppc, gstreamer-plugins-bad-free-devel-docs-0.10.23-22.el7_3
- Red Hat Enterprise Linux Workstation (v. 7) gstreamer-plugins-bad-free-0.10.23-22.el7_3
- Red Hat Enterprise Linux Workstation Optional (v. 7) gstreamer-plugins-bad-free-devel-0.10.23-22.el7_3, gstreamer-plugins-bad-free-devel-docs-0.10.23-22.el7_3
Fixes 3 records
Priority MEDIUM 41
Integer overflow in the vmnc decoder in the gstreamer allows remote attackers to cause a denial of service (crash) via large width and height values, which triggers a buffer overflow.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.04843 · Published 2017-01-23 · Partial fix CWE-190
Priority LOW 39
Off-by-one error in the gst_h264_parse_set_caps function in GStreamer before 1.10.2 allows remote attackers to have unspecified impact via a crafted file, which triggers an out-of-bounds read.
CVSS 3.0HIGH 7.8· Local · No auth · User interaction · EPSS 0.02905 · Published 2017-01-13 · Partial fix CWE-125
Priority LOW 39
The ROM mappings in the NSF decoder in gstreamer 0.10.x allow remote attackers to cause a denial of service (out-of-bounds read or write) and possibly execute arbitrary code via a crafted NSF music file.
CVSS 3.0HIGH 7.8· Local · No auth · User interaction · EPSS 0.02839 · Published 2017-01-23 · Partial fix CWE-125
THREATIST.IORead the docs