Red Hat Security Advisory

RHSA-2024:2287

gstreamer1-plugins-bad-free security update

Released 2024-04-30 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 9) gstreamer1-plugins-bad-free-1.22.1-4.el9
Red Hat Enterprise Linux CRB (v. 9) gstreamer1-plugins-bad-free-devel-1.22.1-4.el9

TI-2023-21292 CVE-2023-40476 · GHSA-jh94-w345-vcxj

MEDIUM 44

GStreamer H265 Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02256 Published 2024-05-03 Partial fix CWE-121

TI-2023-21291 CVE-2023-40475 · GHSA-r6qp-3cmm-v7xj

MEDIUM 44

GStreamer MXF File Parsing Integer Overflow Remote Code Execution Vulnerability.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02101 Published 2024-05-03 Partial fix CWE-190

TI-2023-21290 CVE-2023-40474 · GHSA-j2wr-x8cm-vx8p

MEDIUM 44

GStreamer MXF File Parsing Integer Overflow Remote Code Execution Vulnerability.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02101 Published 2024-05-03 Partial fix CWE-190

TI-2023-27418 CVE-2023-50186 · GHSA-4rp4-77f3-px46

MEDIUM 43

GStreamer AV1 Video Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01534 Published 2024-05-03 Fixed CWE-121