Red Hat Security AdvisoryRHSA-2017:0019
gstreamer-plugins-good security update
Released 2017-01-05 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) gstreamer-plugins-good-0.10.31-12.el7_3
- Red Hat Enterprise Linux Client Optional (v. 7) gstreamer-plugins-good-devel-docs-0.10.31-12.el7_3
- Red Hat Enterprise Linux ComputeNode (v. 7) gstreamer-plugins-good-0.10.31-12.el7_3
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) gstreamer-plugins-good-devel-docs-0.10.31-12.el7_3
- Red Hat Enterprise Linux Server (v. 7) gstreamer-plugins-good-0.10.31-12.el7_3, gstreamer-plugins-good-0.10.31-12.el7_3.ppc
- Red Hat Enterprise Linux Server Optional (v. 7) gstreamer-plugins-good-devel-docs-0.10.31-12.el7_3
- Red Hat Enterprise Linux Workstation (v. 7) gstreamer-plugins-good-0.10.31-12.el7_3
- Red Hat Enterprise Linux Workstation Optional (v. 7) gstreamer-plugins-good-devel-docs-0.10.31-12.el7_3
Fixes 5 records
Priority MEDIUM 53
Heap-based buffer overflow in the flx_decode_delta_fli function in gst/flx/gstflxdec.c in the FLIC decoder in GStreamer before 1.10.2 allows remote attackers to execute arbitrary code or cause a denial of service (applic…
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.08334 · Published 2017-01-27 · Partial fix CWE-119
Priority MEDIUM 53
Heap-based buffer overflow in the flx_decode_delta_fli function in gst/flx/gstflxdec.c in the FLIC decoder in GStreamer before 1.10.2 allows remote attackers to execute arbitrary code or cause a denial of service (applic…
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.08839 · Published 2017-01-27 · Partial fix CWE-119
Priority MEDIUM 53
Heap-based buffer overflow in the flx_decode_delta_fli function in gst/flx/gstflxdec.c in the FLIC decoder in GStreamer before 1.10.2 allows remote attackers to execute arbitrary code or cause a denial of service (applic…
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.08839 · Published 2017-01-27 · Partial fix CWE-119
Priority MEDIUM 41
The FLIC decoder in GStreamer before 1.10.2 allows remote attackers to cause a denial of service (out-of-bounds write and crash) via a crafted series of skip and count pairs.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.05063 · Published 2017-01-13 · Partial fix CWE-787
Priority LOW 30
The flx_decode_chunks function in gst/flx/gstflxdec.c in GStreamer before 1.10.2 allows remote attackers to cause a denial of service (invalid memory read and crash) via a crafted FLIC file.
CVSS 3.0MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.0252 · Published 2017-01-13 · Partial fix CWE-125
THREATIST.IORead the docs