Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

altlinux логотип

ALT-PU-2025-16486

Высокий

ALT-PU-2025-16486: package gstreamer1.0 update to version 1.26.4-alt1

Источник
errata.altlinux.org
Дата публикации
27.07.2025
Дата обновления
27.07.2025
Устраненные уязвимости
14

ALT Linux branch p11
ALT Container
ALT Education
ALT Workstation
ALT Workstation K
ALT Server
ALT Virtualization PVE Edition

Описание

This update upgrades gstreamer1.0 to version 1.26.4-alt1.

Устраненные уязвимости14

Связанные уязвимости

CVSS3: 7.8
ubuntu
больше 1 года назад

GStreamer Incorrect Permission Assignment Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of GStreamer. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the product installer. The issue results from incorrect permissions on folders. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of a target user. Was ZDI-CAN-25448.

CVSS3: 7.8
nvd
больше 1 года назад

GStreamer Incorrect Permission Assignment Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of GStreamer. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the product installer. The issue results from incorrect permissions on folders. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of a target user. Was ZDI-CAN-25448.

CVSS3: 7.8
debian
больше 1 года назад

GStreamer Incorrect Permission Assignment Local Privilege Escalation V ...

CVSS3: 7
github
больше 1 года назад

GStreamer Incorrect Permission Assignment Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of GStreamer. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the product installer. The issue results from incorrect permissions on folders. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of a target user. Was ZDI-CAN-25448.

CVSS3: 7
fstec
больше 1 года назад

Уязвимость мультимедийного фреймворка Gstreamer, связанная с ошибками обработки разрешений, позволяющая нарушителю повысить свои привилегии