SUSE: CVE-2021-3185: SUSE Linux Security Advisory
8
(AV:N/AC:L/Au:N/C:P/I:P/A:P)
01/26/2021
06/03/2021
06/02/2021
10/26/2022
Description
A flaw was found in the gstreamer h264 component of gst-plugins-bad before v1.18.1 where when parsing a h264 header, an attacker could cause the stack to be smashed, memory corruption and possibly code execution.
Solution(s)
- suse-upgrade-gstreamer
- suse-upgrade-gstreamer-32bit
- suse-upgrade-gstreamer-devel
- suse-upgrade-gstreamer-doc
- suse-upgrade-gstreamer-lang
- suse-upgrade-gstreamer-plugins-bad
- suse-upgrade-gstreamer-plugins-bad-32bit
- suse-upgrade-gstreamer-plugins-bad-64bit
- suse-upgrade-gstreamer-plugins-bad-chromaprint
- suse-upgrade-gstreamer-plugins-bad-chromaprint-32bit
- suse-upgrade-gstreamer-plugins-bad-chromaprint-64bit
- suse-upgrade-gstreamer-plugins-bad-devel
- suse-upgrade-gstreamer-plugins-bad-doc
- suse-upgrade-gstreamer-plugins-bad-fluidsynth
- suse-upgrade-gstreamer-plugins-bad-fluidsynth-32bit
- suse-upgrade-gstreamer-plugins-bad-fluidsynth-64bit
- suse-upgrade-gstreamer-plugins-bad-lang
- suse-upgrade-gstreamer-plugins-base
- suse-upgrade-gstreamer-plugins-base-32bit
- suse-upgrade-gstreamer-plugins-base-devel
- suse-upgrade-gstreamer-plugins-base-devel-32bit
- suse-upgrade-gstreamer-plugins-base-doc
- suse-upgrade-gstreamer-plugins-base-lang
- suse-upgrade-gstreamer-plugins-good
- suse-upgrade-gstreamer-plugins-good-32bit
- suse-upgrade-gstreamer-plugins-good-doc
- suse-upgrade-gstreamer-plugins-good-extra
- suse-upgrade-gstreamer-plugins-good-extra-32bit
- suse-upgrade-gstreamer-plugins-good-gtk
- suse-upgrade-gstreamer-plugins-good-jack
- suse-upgrade-gstreamer-plugins-good-jack-32bit
- suse-upgrade-gstreamer-plugins-good-lang
- suse-upgrade-gstreamer-plugins-good-qtqml
- suse-upgrade-gstreamer-plugins-ugly
- suse-upgrade-gstreamer-plugins-ugly-32bit
- suse-upgrade-gstreamer-plugins-ugly-doc
- suse-upgrade-gstreamer-plugins-ugly-lang
- suse-upgrade-gstreamer-utils
- suse-upgrade-libgstadaptivedemux-1_0-0
- suse-upgrade-libgstadaptivedemux-1_0-0-32bit
- suse-upgrade-libgstadaptivedemux-1_0-0-64bit
- suse-upgrade-libgstallocators-1_0-0
- suse-upgrade-libgstallocators-1_0-0-32bit
- suse-upgrade-libgstapp-1_0-0
- suse-upgrade-libgstapp-1_0-0-32bit
- suse-upgrade-libgstaudio-1_0-0
- suse-upgrade-libgstaudio-1_0-0-32bit
- suse-upgrade-libgstbadallocators-1_0-0
- suse-upgrade-libgstbadaudio-1_0-0
- suse-upgrade-libgstbadaudio-1_0-0-32bit
- suse-upgrade-libgstbadaudio-1_0-0-64bit
- suse-upgrade-libgstbadbase-1_0-0
- suse-upgrade-libgstbadvideo-1_0-0
- suse-upgrade-libgstbasecamerabinsrc-1_0-0
- suse-upgrade-libgstbasecamerabinsrc-1_0-0-32bit
- suse-upgrade-libgstbasecamerabinsrc-1_0-0-64bit
- suse-upgrade-libgstcodecparsers-1_0-0
- suse-upgrade-libgstcodecparsers-1_0-0-32bit
- suse-upgrade-libgstcodecparsers-1_0-0-64bit
- suse-upgrade-libgstcodecs-1_0-0
- suse-upgrade-libgstegl-1_0-0
- suse-upgrade-libgstfft-1_0-0
- suse-upgrade-libgstfft-1_0-0-32bit
- suse-upgrade-libgstgl-1_0-0
- suse-upgrade-libgstgl-1_0-0-32bit
- suse-upgrade-libgstinsertbin-1_0-0
- suse-upgrade-libgstinsertbin-1_0-0-32bit
- suse-upgrade-libgstinsertbin-1_0-0-64bit
- suse-upgrade-libgstisoff-1_0-0
- suse-upgrade-libgstisoff-1_0-0-32bit
- suse-upgrade-libgstisoff-1_0-0-64bit
- suse-upgrade-libgstmpegts-1_0-0
- suse-upgrade-libgstmpegts-1_0-0-32bit
- suse-upgrade-libgstmpegts-1_0-0-64bit
- suse-upgrade-libgstpbutils-1_0-0
- suse-upgrade-libgstpbutils-1_0-0-32bit
- suse-upgrade-libgstphotography-1_0-0
- suse-upgrade-libgstphotography-1_0-0-32bit
- suse-upgrade-libgstphotography-1_0-0-64bit
- suse-upgrade-libgstplay-1_0-0
- suse-upgrade-libgstplayer-1_0-0
- suse-upgrade-libgstplayer-1_0-0-32bit
- suse-upgrade-libgstplayer-1_0-0-64bit
- suse-upgrade-libgstreamer-1_0-0
- suse-upgrade-libgstreamer-1_0-0-32bit
- suse-upgrade-libgstriff-1_0-0
- suse-upgrade-libgstriff-1_0-0-32bit
- suse-upgrade-libgstrtp-1_0-0
- suse-upgrade-libgstrtp-1_0-0-32bit
- suse-upgrade-libgstrtsp-1_0-0
- suse-upgrade-libgstrtsp-1_0-0-32bit
- suse-upgrade-libgstsctp-1_0-0
- suse-upgrade-libgstsctp-1_0-0-32bit
- suse-upgrade-libgstsctp-1_0-0-64bit
- suse-upgrade-libgstsdp-1_0-0
- suse-upgrade-libgstsdp-1_0-0-32bit
- suse-upgrade-libgsttag-1_0-0
- suse-upgrade-libgsttag-1_0-0-32bit
- suse-upgrade-libgsturidownloader-1_0-0
- suse-upgrade-libgsturidownloader-1_0-0-32bit
- suse-upgrade-libgsturidownloader-1_0-0-64bit
- suse-upgrade-libgstva-1_0-0
- suse-upgrade-libgstvideo-1_0-0
- suse-upgrade-libgstvideo-1_0-0-32bit
- suse-upgrade-libgstvulkan-1_0-0
- suse-upgrade-libgstwayland-1_0-0
- suse-upgrade-libgstwayland-1_0-0-32bit
- suse-upgrade-libgstwayland-1_0-0-64bit
- suse-upgrade-libgstwebrtc-1_0-0
- suse-upgrade-libgstwebrtc-1_0-0-32bit
- suse-upgrade-libgstwebrtc-1_0-0-64bit
- suse-upgrade-typelib-1_0-gst-1_0
- suse-upgrade-typelib-1_0-gstallocators-1_0
- suse-upgrade-typelib-1_0-gstapp-1_0
- suse-upgrade-typelib-1_0-gstaudio-1_0
- suse-upgrade-typelib-1_0-gstbadallocators-1_0
- suse-upgrade-typelib-1_0-gstbadaudio-1_0
- suse-upgrade-typelib-1_0-gstcodecs-1_0
- suse-upgrade-typelib-1_0-gstgl-1_0
- suse-upgrade-typelib-1_0-gstglegl-1_0
- suse-upgrade-typelib-1_0-gstglwayland-1_0
- suse-upgrade-typelib-1_0-gstglx11-1_0
- suse-upgrade-typelib-1_0-gstinsertbin-1_0
- suse-upgrade-typelib-1_0-gstmpegts-1_0
- suse-upgrade-typelib-1_0-gstpbutils-1_0
- suse-upgrade-typelib-1_0-gstplay-1_0
- suse-upgrade-typelib-1_0-gstplayer-1_0
- suse-upgrade-typelib-1_0-gstrtp-1_0
- suse-upgrade-typelib-1_0-gstrtsp-1_0
- suse-upgrade-typelib-1_0-gstsdp-1_0
- suse-upgrade-typelib-1_0-gsttag-1_0
- suse-upgrade-typelib-1_0-gstvideo-1_0
- suse-upgrade-typelib-1_0-gstwebrtc-1_0
Advanced vulnerability management analytics and reporting.
Key Features
- Lightweight Endpoint Agent
- Live Dashboards
- Real Risk Prioritization
- IT-Integrated Remediation Projects
- Cloud, Virtual, and Container Assessment
- Integrated Threat Feeds
- Easy-to-Use RESTful API
- Automation-Assisted Patching
- Automated Containment
With Rapid7 live dashboards, I have a clear view of all the assets on my network, which ones can be exploited, and what I need to do in order to reduce the risk in my environment in real-time. No other tool gives us that kind of value and insight.
– Scott Cheney, Manager of Information Security, Sierra View Medical Center