Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
osvGoogleOSV:USN-6526-1
HistoryNov 29, 2023 - 5:48 p.m.

gst-plugins-bad1.0 vulnerabilities

2023-11-2917:48:53
Google
osv.dev
5
gstreamer bad plugins
media files
remote attack
denial of service
arbitrary code

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

7.2 High

AI Score

Confidence

Low

0.0005 Low

EPSS

Percentile

16.2%

JSON

It was discovered that GStreamer Bad Plugins incorrectly handled certain
media files. A remote attacker could use this issue to cause GStreamer
Bad Plugins to crash, resulting in a denial of service, or possibly
execute arbitrary code.

Related

openvas 49
nessus 57
ubuntu 1
gentoo 1
osv 10
oraclelinux 5
rocky 3
almalinux 3
debian 4
photon 3
amazon 2
redhat 7
rosalinux 1
fedora 13
mageia 1
redos 1
vulnrichment 3
redhatcve 3
alpinelinux 5
nvd 4
zdi 4
debiancve 4
cvelist 3
ubuntucve 4
cve 3
veracode 4
centos 1
openvas
openvas
Ubuntu: Security Advisory (USN-6526-1)
2023-11-30 00:00:00
SUSE: Security Advisory (SUSE-SU-2023:4971-1)
2023-12-26 00:00:00
Debian: Security Advisory (DLA-3633-1)
2023-10-30 00:00:00
nessus
nessus
Ubuntu 20.04 LTS / 22.04 LTS / 23.04 / 23.10 : GStreamer Bad Plugins vulnerabilities (USN-6526-1)
2023-11-29 00:00:00
GLSA-202406-06 : GStreamer, GStreamer Plugins: Multiple Vulnerabilities
2024-06-29 00:00:00
RHEL 6 : gstreamer-plugins-bad (Unpatched Vulnerability)
2024-05-11 00:00:00
ubuntu
ubuntu
GStreamer Bad Plugins vulnerabilities
2023-11-29 00:00:00
gentoo
gentoo
GStreamer, GStreamer Plugins: Multiple Vulnerabilities
2024-06-28 00:00:00
osv
osv
gst-plugins-bad1.0 - security update
2023-10-24 00:00:00
Moderate: gstreamer1-plugins-bad-free security update
2024-05-22 00:00:00
gst-plugins-bad1.0 - security update
2023-10-28 00:00:00
oraclelinux
oraclelinux
gstreamer1-plugins-bad-free security update
2024-05-23 00:00:00
gstreamer1-plugins-bad-free security update
2024-05-02 00:00:00
gstreamer1-plugins-bad-free security update
2023-12-15 00:00:00
rocky
rocky
gstreamer1-plugins-bad-free security update
2024-06-14 13:59:30
gstreamer1-plugins-bad-free security update
2024-05-10 14:32:38
gstreamer1-plugins-bad-free security update
2024-01-09 04:07:10
almalinux
almalinux
Moderate: gstreamer1-plugins-bad-free security update
2024-05-22 00:00:00
Moderate: gstreamer1-plugins-bad-free security update
2024-04-30 00:00:00
Important: gstreamer1-plugins-bad-free security update
2023-12-13 00:00:00
debian
debian
[SECURITY] [DSA 5533-1] gst-plugins-bad1.0 security update
2023-10-24 20:58:56
[SECURITY] [DLA 3633-1] gst-plugins-bad1.0 security update
2023-10-28 12:08:28
[SECURITY] [DSA 5565-1] gst-plugins-bad1.0 security update
2023-11-25 14:46:20
photon
photon
Important Photon OS Security Update - PHSA-2023-5.0-0167
2023-12-12 00:00:00
Important Photon OS Security Update - PHSA-2023-5.0-0145
2023-11-17 00:00:00
Critical Photon OS Security Update - PHSA-2023-4.0-0523
2023-12-01 00:00:00
amazon
amazon
Important: gstreamer1-plugins-bad-free
2023-10-12 15:09:00
Important: gstreamer1-plugins-bad-free
2023-11-29 22:19:00
redhat
redhat
(RHSA-2024:3060) Moderate: gstreamer1-plugins-bad-free security update
2024-05-22 06:35:29
(RHSA-2024:2287) Moderate: gstreamer1-plugins-bad-free security update
2024-04-30 06:15:16
(RHSA-2023:7792) Important: gstreamer1-plugins-bad-free security update
2023-12-13 16:00:51
rosalinux
rosalinux
Advisory ROSA-SA-2024-2357
2024-02-20 10:26:09
fedora
fedora
[SECURITY] Fedora 39 Update: gstreamer1-plugins-good-1.22.7-1.fc39
2023-11-19 01:26:32
[SECURITY] Fedora 39 Update: gstreamer1-plugins-base-1.22.7-1.fc39
2023-11-19 01:26:32
[SECURITY] Fedora 39 Update: gstreamer1-plugin-libav-1.22.7-1.fc39
2023-11-19 01:26:31
mageia
mageia
Updated gstreamer packages fix many security vulnerabilities
2023-12-22 14:04:51
redos
redos
ROS-20230915-11
2023-09-15 00:00:00
vulnrichment
vulnrichment
CVE-2023-37329 GStreamer SRT File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
2024-05-03 01:58:21
CVE-2023-44446 GStreamer MXF File Parsing Use-After-Free Remote Code Execution Vulnerability
2024-05-03 02:14:08
CVE-2023-40474 GStreamer MXF File Parsing Integer Overflow Remote Code Execution Vulnerability
2024-05-03 02:11:10
redhatcve
redhatcve
CVE-2023-37329
2023-12-14 18:01:38
CVE-2023-44446
2023-11-17 10:16:41
CVE-2023-40475
2023-12-14 18:02:49
alpinelinux
alpinelinux
CVE-2023-37329
2024-05-03 02:15:43
CVE-2023-44429
2024-05-03 03:15:57
CVE-2023-44446
2024-05-03 03:16:00
nvd
nvd
CVE-2023-37329
2024-05-03 02:15:43
CVE-2023-40475
2024-05-03 03:15:20
CVE-2023-40476
2024-05-03 03:15:20
zdi
zdi
GStreamer AV1 Codec Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
2023-11-15 00:00:00
GStreamer SRT File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
2023-07-06 00:00:00
GStreamer MXF File Parsing Use-After-Free Remote Code Execution Vulnerability
2023-11-15 00:00:00
debiancve
debiancve
CVE-2023-44429
2024-05-03 03:15:57
CVE-2023-37329
2024-05-03 02:15:43
CVE-2023-40474
2024-05-03 03:15:19
cvelist
cvelist
CVE-2023-44429 GStreamer AV1 Codec Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
2024-05-03 02:13:56
CVE-2023-37329 GStreamer SRT File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
2024-05-03 01:58:21
CVE-2023-40475 GStreamer MXF File Parsing Integer Overflow Remote Code Execution Vulnerability
2024-05-03 02:11:11
ubuntucve
ubuntucve
CVE-2023-37329
2023-07-31 00:00:00
CVE-2023-44429
2023-11-17 00:00:00
CVE-2023-40475
2023-09-28 00:00:00
cve
cve
CVE-2023-37329
2024-05-03 02:15:43
CVE-2023-40474
2024-05-03 03:15:19
CVE-2023-40475
2024-05-03 03:15:20
veracode
veracode
Heap-based Buffer Overflow
2023-11-30 18:06:48
Use After Free
2023-11-30 18:06:34
Integer Overflow
2023-11-30 16:32:06
centos
centos
gstreamer security update
2024-01-26 18:07:56

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

7.2 High

AI Score

Confidence

Low

0.0005 Low

EPSS

Percentile

16.2%

JSON
Related for OSV:USN-6526-1
openvas49nessus57ubuntu1gentoo1osv10oraclelinux5rocky3almalinux3debian4photon3amazon2redhat7rosalinux1fedora13mageia1redos1vulnrichment3redhatcve3alpinelinux5nvd4zdi4debiancve4cvelist3ubuntucve4cve3veracode4centos1