Medium ELSA-2024-3089 1 CVE

Moderate: gstreamer1-plugins-good security update (Oracle Linux 8)

Published May 23, 2024 · Updated May 23, 2024

Ecosystem: Oracle Linux

Summary

[1.16.1-4]
- CVE-2023-37327: integer overflow leading to heap overwrite in
FLAC image tag handling
- Resolves: RHEL-19469

Fixed packages 2

Release	Package	Fixed in
Oracle Linux · 8	gstreamer1-plugins-good	0:1.16.1-4.el8
Oracle Linux · 8	gstreamer1-plugins-good-gtk	0:1.16.1-4.el8

Vulnerabilities 1

High 7.6

CVE-2023-37327

GStreamer FLAC File Parsing Integer Overflow Remote Code Execution Vulnerability

GStreamer FLAC File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerabil…

GStreamer GStreamer gst-plugins-good1.0 gst-plugins-good1.0 Debian Ubuntu Azure Linux Alpine

May 3, 2024