Medium WID-SEC-2023-2070 13 CVEs

GStreamer: Mehrere Schwachstellen

Published Feb 1, 2017 · Updated Aug 15, 2023 · Revision 13 · de-DE

Vendor: Debian Vendor: Red Hat Vendor: SUSE Vendor: Ubuntu Product: Enterprise Linux Product: Linux Product: Linux Product: Linux Platform: Linux

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in GStreamer ausnutzen, um beliebigen Programmcode mit Benutzerrechten auszuführen oder einen Denial of Service zu verursachen.

Product

GStreamer ist ein Multimedia-Framework mit einer Plugin-basierten Architektur für eine Vielzahl von Plattformen.

Vulnerabilities 13

Unscored —

CVE-2016-10198

The gst_aac_parse_sink_setcaps function in gst/audioparsers/gstaacparse.c in gst-plugins-good in GStreamer before 1.10.…

gst-plugins-good1.0 gst-plugins-good1.0 gst-plugins-good gst-plugins-good0.10 Debian Ubuntu Alpine

Feb 9, 2017
Unscored —

CVE-2016-10199

The qtdemux_tag_add_str_full function in gst/isomp4/qtdemux.c in gst-plugins-good in GStreamer before 1.10.3 allows rem…

gst-plugins-good1.0 gst-plugins-good1.0 gst-plugins-good gst-plugins-good0.10 Debian Ubuntu Alpine

Feb 9, 2017
Unscored —

CVE-2017-5837

The gst_riff_create_audio_caps function in gst-libs/gst/riff/riff-media.c in gst-plugins-base in GStreamer before 1.10.…

gst-plugins-base1.0 gst-plugins-base1.0 gst-plugins-base0.10 gst-plugins-base1 Debian Ubuntu Alpine

Feb 9, 2017
Unscored —

CVE-2017-5838

The gst_date_time_new_from_iso8601_string function in gst/gstdatetime.c in GStreamer before 1.10.3 allows remote attack…

gstreamer1.0 gstreamer1.0 gstreamer0.10 Debian Ubuntu

Feb 9, 2017
Unscored —

CVE-2017-5839

The gst_riff_create_audio_caps function in gst-libs/gst/riff/riff-media.c in gst-plugins-base in GStreamer before 1.10.…

gst-plugins-base1.0 gst-plugins-base1.0 gst-plugins-base1 Debian Ubuntu Alpine

Feb 9, 2017
Unscored —

CVE-2017-5840

The qtdemux_parse_samples function in gst/isomp4/qtdemux.c in gst-plugins-good in GStreamer before 1.10.3 allows remote…

gst-plugins-good1.0 gst-plugins-good1.0 gst-plugins-good gst-plugins-good0.10 Debian Ubuntu Alpine

Feb 9, 2017
Unscored —

CVE-2017-5841

The gst_avi_demux_parse_ncdt function in gst/avi/gstavidemux.c in gst-plugins-good in GStreamer before 1.10.3 allows re…

gst-plugins-good1.0 gst-plugins-good1.0 gst-plugins-good gst-plugins-good1 Debian Ubuntu Alpine

Feb 9, 2017
Unscored —

CVE-2017-5842

The html_context_handle_element function in gst/subparse/samiparse.c in gst-plugins-base in GStreamer before 1.10.3 all…

gst-plugins-base1.0 gst-plugins-base1.0 gst-plugins-base1 Debian Ubuntu Alpine

Feb 9, 2017
Unscored —

CVE-2017-5843

Multiple use-after-free vulnerabilities in the (1) gst_mini_object_unref, (2) gst_tag_list_unref, and (3) gst_mxf_demux…

gst-plugins-bad1.0 gst-plugins-bad1.0 gst-plugins-bad0.10 Debian Ubuntu

Feb 9, 2017
Unscored —

CVE-2017-5844

The gst_riff_create_audio_caps function in gst-libs/gst/riff/riff-media.c in gst-plugins-base in GStreamer before 1.10.…

gst-plugins-base1.0 gst-plugins-base1.0 gst-plugins-base0.10 gst-plugins-base1 Debian Ubuntu Alpine

Feb 9, 2017
Unscored —

CVE-2017-5845

The gst_avi_demux_parse_ncdt function in gst/avi/gstavidemux.c in gst-plugins-good in GStreamer before 1.10.3 allows re…

gst-plugins-good1.0 gst-plugins-good1.0 gst-plugins-good gst-plugins-good1 Debian Ubuntu Alpine

Feb 9, 2017
Unscored —

CVE-2017-5846

The gst_asf_demux_process_ext_stream_props function in gst/asfdemux/gstasfdemux.c in gst-plugins-ugly in GStreamer befo…

gst-plugins-ugly1.0 gst-plugins-ugly1.0 gst-plugins-ugly gst-plugins-ugly1 Debian Ubuntu Alpine

Feb 9, 2017
Unscored —

CVE-2017-5847

The gst_asf_demux_process_ext_content_desc function in gst/asfdemux/gstasfdemux.c in gst-plugins-ugly in GStreamer allo…

gst-plugins-ugly1.0 gst-plugins-ugly1.0 gst-plugins-ugly gst-plugins-ugly1 Debian Ubuntu Alpine

Feb 9, 2017

Revision history

2023-08-15 #13
Neue Updates von Ubuntu aufgenommen
2020-06-01 #12
Neue Updates von Debian aufgenommen
2020-04-01 #11
Neue Updates von Debian aufgenommen
2020-03-02 #10
Neue Updates von Debian aufgenommen
2017-08-07 #9
Added references
2017-05-14 #8
Added references
2017-04-18 #7
New remediations available
2017-04-17 #6
New remediations available
2017-04-09 #5
New remediations available
2017-03-28 #4
New remediations available
2017-03-27 #3
New remediations available
2017-02-01 #1
Initial Release
2017-02-01 #2
Version nicht vorhanden

References

Ubuntu Security Notice USN-6291-1 vom 2023-08-16
https://ubuntu.com/security/notices/USN-6291-1
Eintrag in der OSS Mailing Liste vom 2017-02-01
http://seclists.org/oss-sec/2017/q1/284
Ubuntu Security Notice USN-3245-1 vom 2017-03-27
http://www.ubuntu.com/usn/usn-3245-1/
Ubuntu Security Notice USN-3244-1 vom 2017-03-27
http://www.ubuntu.com/usn/usn-3244-1/
Debian Security Advisory DSA-3822 vom 2017-03-28
https://www.debian.org/security/2017/dsa-3822
Debian Security Advisory DSA-3821 vom 2017-03-28
https://www.debian.org/security/2017/dsa-3821
Debian Security Advisory DSA-3820 vom 2017-03-28
https://www.debian.org/security/2017/dsa-3820
Debian Security Advisory DSA-3819 vom 2017-03-28
https://www.debian.org/security/2017/dsa-3819
Debian Security Advisory DSA-3818 vom 2017-03-28
https://www.debian.org/security/2017/dsa-3818
SUSE Security Update SUSE-SU-2017:0962-1 vom 2017-04-07
https://www.suse.com/support/update/announcement/2017/suse-su-20170962-1.html
SUSE Security Update SUSE-SU-2017:0967-1 vom 2017-04-08
https://www.suse.com/support/update/announcement/2017/suse-su-20170967-1.html
SUSE Security Update SUSE-SU-2017:0966-1 vom 2017-04-08
https://www.suse.com/support/update/announcement/2017/suse-su-20170966-1.html
SUSE Security Update SUSE-SU-2017:1004-1 vom 2017-04-13
https://www.suse.com/support/update/announcement/2017/suse-su-20171004-1.html
SUSE Security Update SUSE-SU-2017:1010-1 vom 2017-04-13
https://www.suse.com/support/update/announcement/2017/suse-su-20171010-1.html
SUSE Security Update SUSE-SU-2017:1003-1 vom 2017-04-13
https://www.suse.com/support/update/announcement/2017/suse-su-20171003-1.html
SUSE Security Update SUSE-SU-2017:1012-1 vom 2017-04-13
https://www.suse.com/support/update/announcement/2017/suse-su-20171012-1.html
SUSE Security Update SUSE-SU-2017:1041-1 vom 2017-04-18
https://www.suse.com/support/update/announcement/2017/suse-su-20171041-1.html
SUSE Security Update SUSE-SU-2017:1039-1 vom 2017-04-18
https://www.suse.com/support/update/announcement/2017/suse-su-20171039-1.html
RedHat Secutity Advisory: RHSA-2017:2060
https://access.redhat.com/errata/RHSA-2017:2060
SUSE Security Update SUSE-SU-2019:14076-1 vom 2019-06-11
https://www.suse.com/support/update/announcement/2019/suse-su-201914076-1.html
Debian Security Advisory DLA 2126 vom 2020-03-02
https://lists.debian.org/debian-lts-announce/2020/debian-lts-announce-202002/msg00032.html
Debian Security Advisory DLA 2164 vom 2020-04-01
https://lists.debian.org/debian-lts-announce/2020/debian-lts-announce-202003/msg00038.html
Debian Security Advisory DLA 2225 vom 2020-05-30
https://lists.debian.org/debian-lts-announce/2020/debian-lts-announce-202005/msg00029.html
Debian Security Advisory DLA 2226 vom 2020-05-30
https://lists.debian.org/debian-lts-announce/2020/debian-lts-announce-202005/msg00030.html