Medium ELSA-2024-2303 1 CVE

Moderate: gstreamer1-plugins-good security update (Oracle Linux 9)

Published May 2, 2024 · Updated May 2, 2024

Ecosystem: Oracle Linux

Summary

[1.22.1-2]
- CVE-2023-37327: integer overflow leading to heap overwrite in FLAC
image tag handling
- Resolves: RHEL-19471

Fixed packages 2

Release	Package	Fixed in
Oracle Linux · 9	gstreamer1-plugins-good	0:1.22.1-2.el9
Oracle Linux · 9	gstreamer1-plugins-good-gtk	0:1.22.1-2.el9

Vulnerabilities 1

High 7.6

CVE-2023-37327

GStreamer FLAC File Parsing Integer Overflow Remote Code Execution Vulnerability

GStreamer FLAC File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerabil…

GStreamer GStreamer gst-plugins-good1.0 gst-plugins-good1.0 Debian Ubuntu Azure Linux Alpine

May 3, 2024