Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
mageiaGentoo FoundationMGASA-2023-0354
HistoryDec 22, 2023 - 2:04 p.m.

Updated gstreamer packages fix many security vulnerabilities

2023-12-2214:04:51
Gentoo Foundation
advisories.mageia.org
20
gstreamer
packages
security
vulnerabilities
references
cves
zdi-can-22300
fix
issues

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

7 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

33.4%

JSON

Updated gstreamer packages fix many security issues (see the references below). Apart from the listed CVEs, ZDI-CAN-22300 is also fixed.

OSVersionArchitecturePackageVersionFilename
Mageia9noarchgstreamer1.0< 1.22.8-1gstreamer1.0-1.22.8-1.mga9
Mageia9noarchgstreamer1.0-plugins-base< 1.22.8-1gstreamer1.0-plugins-base-1.22.8-1.mga9
Mageia9noarchgstreamer1.0-omx< 1.22.8-1gstreamer1.0-omx-1.22.8-1.mga9
Mageia9noarchgstreamer1.0-python< 1.22.8-1gstreamer1.0-python-1.22.8-1.mga9
Mageia9noarchgstreamer1.0-plugins-good< 1.22.8-1gstreamer1.0-plugins-good-1.22.8-1.mga9
Mageia9noarchgstreamer1.0-plugins-bad< 1.22.8-1gstreamer1.0-plugins-bad-1.22.8-1.mga9
Mageia9noarchgstreamer1.0-plugins-ugly< 1.22.8-1gstreamer1.0-plugins-ugly-1.22.8-1.mga9
Mageia9noarchgstreamer1.0-rtsp-server< 1.22.8-1gstreamer1.0-rtsp-server-1.22.8-1.mga9
Mageia9noarchgstreamer1.0-vaapi< 1.22.8-1gstreamer1.0-vaapi-1.22.8-1.mga9
Mageia9noarchgstreamer1.0-devtools< 1.22.8-1gstreamer1.0-devtools-1.22.8-1.mga9
Rows per page:
1-10 of 151

Related

openvas 55
osv 16
nessus 64
ubuntu 3
gentoo 1
oraclelinux 4
redhat 6
mageia 1
almalinux 4
debian 6
suse 2
fedora 12
rocky 2
photon 3
amazon 2
rosalinux 1
ubuntucve 4
zdi 1
nvd 1
debiancve 1
alpinelinux 2
veracode 2
cve 1
cvelist 1
vulnrichment 2
redos 1
redhatcve 1
openvas
openvas
Mageia: Security Advisory (MGASA-2023-0354)
2023-12-25 00:00:00
Ubuntu: Security Advisory (USN-6526-1)
2023-11-30 00:00:00
Ubuntu: Security Advisory (USN-5555-1)
2022-08-09 00:00:00
osv
osv
gst-plugins-bad1.0 vulnerabilities
2023-11-29 17:48:53
gst-plugins-good1.0 - security update
2022-08-09 00:00:00
Moderate: gstreamer1-plugins-good security update
2023-05-09 00:00:00
nessus
nessus
Ubuntu 20.04 LTS / 22.04 LTS / 23.04 / 23.10 : GStreamer Bad Plugins vulnerabilities (USN-6526-1)
2023-11-29 00:00:00
GLSA-202406-06 : GStreamer, GStreamer Plugins: Multiple Vulnerabilities
2024-06-29 00:00:00
AlmaLinux 9 : gstreamer1-plugins-good (ALSA-2023:2260)
2023-05-14 00:00:00
ubuntu
ubuntu
GStreamer Bad Plugins vulnerabilities
2023-11-29 00:00:00
GStreamer Good Plugins vulnerabilities
2022-08-08 00:00:00
GStreamer Base Plugins vulnerabilities
2023-08-02 00:00:00
gentoo
gentoo
GStreamer, GStreamer Plugins: Multiple Vulnerabilities
2024-06-28 00:00:00
oraclelinux
oraclelinux
gstreamer1-plugins-good security update
2023-05-15 00:00:00
gstreamer1-plugins-bad-free security update
2024-05-23 00:00:00
gstreamer1-plugins-bad-free security update
2024-05-02 00:00:00
redhat
redhat
(RHSA-2023:2260) Moderate: gstreamer1-plugins-good security update
2023-05-09 05:05:15
(RHSA-2024:3060) Moderate: gstreamer1-plugins-bad-free security update
2024-05-22 06:35:29
(RHSA-2024:2287) Moderate: gstreamer1-plugins-bad-free security update
2024-04-30 06:15:16
mageia
mageia
Updated gstreamer1.0-plugins-good packages fix security vulnerability
2022-09-10 23:26:43
almalinux
almalinux
Moderate: gstreamer1-plugins-good security update
2023-05-09 00:00:00
Moderate: gstreamer1-plugins-bad-free security update
2024-05-22 00:00:00
Moderate: gstreamer1-plugins-bad-free security update
2024-04-30 00:00:00
debian
debian
[SECURITY] [DLA 3069-1] gst-plugins-good1.0 security update
2022-08-09 15:51:07
[SECURITY] [DSA 5204-1] gst-plugins-good1.0 security update
2022-08-09 19:19:23
[SECURITY] [DSA 5533-1] gst-plugins-bad1.0 security update
2023-10-24 20:58:56
suse
suse
Security update for gstreamer-plugins-good (important)
2022-08-31 00:00:00
Security update for gstreamer-plugins-good (moderate)
2022-11-08 00:00:00
fedora
fedora
[SECURITY] Fedora 38 Update: mingw-gstreamer1-plugins-base-1.22.7-1.fc38
2023-12-25 03:37:40
[SECURITY] Fedora 38 Update: mingw-gstreamer1-plugins-bad-free-1.22.7-1.fc38
2023-12-25 03:37:39
[SECURITY] Fedora 38 Update: mingw-gstreamer1-1.22.7-1.fc38
2023-12-25 03:37:39
rocky
rocky
gstreamer1-plugins-bad-free security update
2024-06-14 13:59:30
gstreamer1-plugins-bad-free security update
2024-05-10 14:32:38
photon
photon
Important Photon OS Security Update - PHSA-2023-5.0-0167
2023-12-12 00:00:00
Important Photon OS Security Update - PHSA-2023-4.0-0320
2023-01-23 00:00:00
Important Photon OS Security Update - PHSA-2023-5.0-0145
2023-11-17 00:00:00
amazon
amazon
Important: gstreamer1-plugins-bad-free
2023-10-12 15:09:00
Important: gstreamer1-plugins-bad-free
2023-11-29 22:19:00
rosalinux
rosalinux
Advisory ROSA-SA-2024-2357
2024-02-20 10:26:09
ubuntucve
ubuntucve
CVE-2022-1925
2022-07-19 00:00:00
CVE-2022-2122
2022-07-19 00:00:00
CVE-2022-1924
2022-07-19 00:00:00
zdi
zdi
GStreamer RealMedia File Parsing Integer Overflow Remote Code Execution Vulnerability
2023-07-27 00:00:00
nvd
nvd
CVE-2023-38104
2024-05-03 02:15:53
debiancve
debiancve
CVE-2023-38104
2024-05-03 02:15:53
alpinelinux
alpinelinux
CVE-2023-38103
2024-05-03 02:15:53
CVE-2023-37329
2024-05-03 02:15:43
veracode
veracode
Integer Overflow
2023-11-30 16:47:43
Remote Code Execution
2023-11-30 16:47:41
cve
cve
CVE-2023-38104
2024-05-03 02:15:53
cvelist
cvelist
CVE-2023-38104 GStreamer RealMedia File Parsing Integer Overflow Remote Code Execution Vulnerability
2024-05-03 01:59:05
vulnrichment
vulnrichment
CVE-2023-38104 GStreamer RealMedia File Parsing Integer Overflow Remote Code Execution Vulnerability
2024-05-03 01:59:05
CVE-2023-37329 GStreamer SRT File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
2024-05-03 01:58:21
redos
redos
ROS-20230915-11
2023-09-15 00:00:00
redhatcve
redhatcve
CVE-2023-37329
2023-12-14 18:01:38

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

7 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

33.4%

JSON
Related for MGASA-2023-0354
openvas55osv16nessus64ubuntu3gentoo1oraclelinux4redhat6mageia1almalinux4debian6suse2fedora12rocky2photon3amazon2rosalinux1ubuntucve4zdi1nvd1debiancve1alpinelinux2veracode2cve1cvelist1vulnrichment2redos1redhatcve1