Medium ELSA-2017-0019 5 CVEs

Moderate: gstreamer-plugins-good security update (Oracle Linux 7)

Published Jan 5, 2017 · Updated Jan 5, 2017

Ecosystem: Oracle Linux

Summary

[0.10.31-12]
- Disable insecure FLX plugin
Resolves: rhbz#1400842

Fixed packages 2

Release	Package	Fixed in
Oracle Linux · 7	gstreamer-plugins-good	0:0.10.31-12.el7_3
Oracle Linux · 7	gstreamer-plugins-good-devel-docs	0:0.10.31-12.el7_3

Vulnerabilities 5

Unscored —

CVE-2016-9634

Heap-based buffer overflow in the flx_decode_delta_fli function in gst/flx/gstflxdec.c in the FLIC decoder in GStreamer…

gst-plugins-good1.0 gst-plugins-good1.0 gst-plugins-good gst-plugins-good0.10 Debian Ubuntu Alpine

Jan 27, 2017
Unscored —

CVE-2016-9635

Heap-based buffer overflow in the flx_decode_delta_fli function in gst/flx/gstflxdec.c in the FLIC decoder in GStreamer…

gst-plugins-good1.0 gst-plugins-good1.0 gst-plugins-good gst-plugins-good0.10 Debian Ubuntu Alpine

Jan 27, 2017
Unscored —

CVE-2016-9636

Heap-based buffer overflow in the flx_decode_delta_fli function in gst/flx/gstflxdec.c in the FLIC decoder in GStreamer…

gst-plugins-good1.0 gst-plugins-good1.0 gst-plugins-good gst-plugins-good0.10 Debian Ubuntu Alpine

Jan 27, 2017
Unscored —

CVE-2016-9807

The flx_decode_chunks function in gst/flx/gstflxdec.c in GStreamer before 1.10.2 allows remote attackers to cause a den…

gst-plugins-good1.0 gst-plugins-good1.0 gst-plugins-good0.10 Debian Ubuntu

Jan 13, 2017
Unscored —

CVE-2016-9808

The FLIC decoder in GStreamer before 1.10.2 allows remote attackers to cause a denial of service (out-of-bounds write a…

gst-plugins-good1.0 gst-plugins-good1.0 gst-plugins-good gst-plugins-good0.10 Debian Ubuntu Alpine

Jan 13, 2017