Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-37327: Integer overflow leading to heap overwrite in FLAC image tag handling
Fixed packages 5
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | gstreamer-plugins-base | 0:0.10.36-18.amzn2.0.1 |
| Amazon Linux · 2 | gstreamer-plugins-base-debuginfo | 0:0.10.36-18.amzn2.0.1 |
| Amazon Linux · 2 | gstreamer-plugins-base-devel | 0:0.10.36-18.amzn2.0.1 |
| Amazon Linux · 2 | gstreamer-plugins-base-devel-docs | 0:0.10.36-18.amzn2.0.1 |
| Amazon Linux · 2 | gstreamer-plugins-base-tools | 0:0.10.36-18.amzn2.0.1 |
Vulnerabilities 1
-
High 7.6
GStreamer FLAC File Parsing Integer Overflow Remote Code Execution Vulnerability
GStreamer FLAC File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerabil…
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2023-37327.html