DOS / potential heap overwrite in mkv demuxing using HEADERSTRIP decompression. Integer overflow in matroskaparse element in gst_matroska_decompress_data function which causes a heap overflow. Due to restrictions on chunk sizes in the matroskademux element, the overflow can't be triggered, however the matroskaparse element has no size checks.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade gstreamer1-plugins-good-gtkUpgrade gstreamer1-plugins-good | May 15, 2023 | Jul 19, 2022 |
| Alpine Linux | — | Upgrade gst-plugins-goodUpgrade gstreamer | Mar 21, 2024 | Jul 19, 2022 |
| Centos_linux | — | Upgrade gstreamer1-plugins-good-gtk-debuginfoUpgrade gstreamer1-plugins-good-debugsourceUpgrade gstreamer1-plugins-goodUpgrade gstreamer1-plugins-good-gtkUpgrade gstreamer1-plugins-good-qt-debuginfoUpgrade gstreamer1-plugins-good-debuginfo | May 15, 2023 | Jul 19, 2022 |
| Debian | — | Upgrade gst-plugins-good1.0 | Aug 17, 2022 | Jul 19, 2022 |
| Gentoo Linux | — | Upgrade media-libs/gst-plugins-good. | Sep 23, 2024 | Jul 19, 2022 |
| Huawei Euleros 2_0_sp3 | — | Upgrade gstreamer1-plugins-good | Oct 28, 2022 | Jul 19, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade gstreamer1-plugins-good | Aug 18, 2022 | Jul 19, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade gstreamer1-plugins-goodUpgrade gstreamer1-plugins-base | Oct 11, 2022 | Jul 19, 2022 |
| Oracle_linux | — | Upgrade gstreamer1-plugins-goodUpgrade gstreamer1-plugins-good-gtk | May 17, 2023 | May 18, 2022 |
| Redhat_linux | — | No solution existsUpgrade gstreamer1-plugins-good-gtk-debuginfoUpgrade gstreamer1-plugins-goodUpgrade gstreamer1-plugins-good-debugsourceUpgrade gstreamer1-plugins-good-gtkUpgrade gstreamer1-plugins-good-qt-debuginfoUpgrade gstreamer1-plugins-good-debuginfo | May 15, 2023 | Jul 19, 2022 |
| Suse | — | Upgrade gstreamer-plugins-good-langUpgrade gstreamer-plugins-good-32bitUpgrade gstreamer-plugins-good-jackUpgrade gstreamer-plugins-good-extraUpgrade gstreamer-0_10-plugins-good-langUpgrade gstreamer-plugins-good-qtqmlUpgrade gstreamer-plugins-good-extra-32bitUpgrade gstreamer-plugins-good-docUpgrade gstreamer-plugins-good-gtkUpgrade gstreamer-0_10-plugins-goodUpgrade gstreamer-plugins-goodUpgrade gstreamer-plugins-good-jack-32bit | Oct 26, 2022 | Jul 19, 2022 |
| Ubuntu | — | Upgrade gstreamer1.0-plugins-goodUpgrade gstreamer1.0-plugins-good (Ubuntu Pro) | Aug 9, 2022 | Jul 19, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 19, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub