Red Hat Security AdvisoryRHSA-2023:2260
gstreamer1-plugins-good security update
Released 2023-05-09 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 9) gstreamer1-plugins-good-1.18.4-6.el9, gstreamer1-plugins-good-gtk-1.18.4-6.el9
Fixes 7 records
Priority LOW 35
Integer overflow in avidemux element in gst_avi_demux_invert function which allows a heap overwrite while parsing avi files.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00503 · Published 2022-07-19 · Partial fix CWE-190
Priority LOW 35
Integer overflow in matroskademux element in gst_matroska_demux_add_wvpk_header function which allows a heap overwrite while parsing matroska files.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00503 · Published 2022-07-19 · Partial fix CWE-122
Priority LOW 34
DOS / potential heap overwrite in qtdemux using zlib decompression.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00456 · Published 2022-07-19 · Partial fix CWE-122
Priority LOW 34
DOS / potential heap overwrite in mkv demuxing using HEADERSTRIP decompression.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00464 · Published 2022-07-19 · Partial fix CWE-122
Priority LOW 34
DOS / potential heap overwrite in mkv demuxing using lzo decompression.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00427 · Published 2022-07-19 · Partial fix CWE-122
Priority LOW 34
DOS / potential heap overwrite in mkv demuxing using bzip decompression.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00427 · Published 2022-07-19 · Partial fix CWE-122
Priority LOW 34
DOS / potential heap overwrite in mkv demuxing using zlib decompression.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00454 · Published 2022-07-19 · Partial fix CWE-122