Red Hat Security Advisory

RHSA-2024:3060

gstreamer1-plugins-bad-free security update

Released 2024-05-22 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 8) gstreamer1-plugins-bad-free-1.16.1-4.el8
Red Hat Enterprise Linux CRB (v. 8) gstreamer1-plugins-bad-free-devel-1.16.1-4.el8

TI-2023-21292 CVE-2023-40476 · GHSA-jh94-w345-vcxj

MEDIUM 44

GStreamer H265 Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02256 Published 2024-05-03 Partial fix CWE-121

TI-2023-21291 CVE-2023-40475 · GHSA-r6qp-3cmm-v7xj

MEDIUM 44

GStreamer MXF File Parsing Integer Overflow Remote Code Execution Vulnerability.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02101 Published 2024-05-03 Partial fix CWE-190

TI-2023-21290 CVE-2023-40474 · GHSA-j2wr-x8cm-vx8p

MEDIUM 44

GStreamer MXF File Parsing Integer Overflow Remote Code Execution Vulnerability.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02101 Published 2024-05-03 Partial fix CWE-190