Summary
Shaun Mirani discovered that GStreamer Base Plugins did not correctly
handle certain memory operations. An attacker could possibly use this issue
to cause a denial of service.
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | gst-plugins-base1.0 | 1.8.3-1ubuntu0.3+esm3 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | gst-plugins-base1.0 | 1.14.5-0ubuntu1~18.04.3+esm2 |
| Ubuntu · Pro 20.04 LTS Pro:20.04:LTS | gst-plugins-base1.0 | 1.16.3-0ubuntu1.4+esm1 |
Vulnerabilities 3
-
Medium 5.6
In GStreamer through 1.26.1, the subparse plugin's parse_subrip_time function may write data past the bounds of a stack…
-
Medium 5.6
In GStreamer through 1.26.1, the subparse plugin's tmplayer_parse_line function may dereference a NULL pointer while pa…
-
Medium 5.5
In GStreamer through 1.26.1, the subparse plugin's subrip_unescape_formatting function may dereference a NULL pointer w…