Описание
Security update for gstreamer-plugins-bad
This update for gstreamer-plugins-bad fixes the following security issues, which would allow attackers able to submit media files for indexing to cause code execution or crashes:
- Check an integer overflow (CVE-2016-9445) and initialize a buffer (CVE-2016-9446) in vmncdec. (bsc#1010829)
- CVE-2016-9809: Ensure codec_data has the right size when reading number of SPS (bsc#1013659).
- CVE-2016-9812: Add more section size checks (bsc#1013678).
- CVE-2016-9813: fix PAT parsing (bsc#1013680).
Список пакетов
SUSE Linux Enterprise Desktop 12 SP2
SUSE Linux Enterprise Server 12 SP2
SUSE Linux Enterprise Server for Raspberry Pi 12 SP2
SUSE Linux Enterprise Server for SAP Applications 12 SP2
SUSE Linux Enterprise Software Development Kit 12 SP2
Ссылки
- Link for SUSE-SU-2016:3296-1
- E-Mail link for SUSE-SU-2016:3296-1
- SUSE Security Ratings
- SUSE Bug 1010829
- SUSE Bug 1013659
- SUSE Bug 1013678
- SUSE Bug 1013680
- SUSE CVE CVE-2016-9445 page
- SUSE CVE CVE-2016-9446 page
- SUSE CVE CVE-2016-9809 page
- SUSE CVE CVE-2016-9812 page
- SUSE CVE CVE-2016-9813 page
Описание
Integer overflow in the vmnc decoder in the gstreamer allows remote attackers to cause a denial of service (crash) via large width and height values, which triggers a buffer overflow.
Затронутые продукты
Ссылки
- CVE-2016-9445
- SUSE Bug 1010829
Описание
The vmnc decoder in the gstreamer does not initialize the render canvas, which allows remote attackers to obtain sensitive information as demonstrated by thumbnailing a simple 1 frame vmnc movie that does not draw to the allocated render canvas.
Затронутые продукты
Ссылки
- CVE-2016-9446
- SUSE Bug 1010829
Описание
Off-by-one error in the gst_h264_parse_set_caps function in GStreamer before 1.10.2 allows remote attackers to have unspecified impact via a crafted file, which triggers an out-of-bounds read.
Затронутые продукты
Ссылки
- CVE-2016-9809
- SUSE Bug 1013659
Описание
The gst_mpegts_section_new function in the mpegts decoder in GStreamer before 1.10.2 allows remote attackers to cause a denial of service (out-of-bounds read) via a too small section.
Затронутые продукты
Ссылки
- CVE-2016-9812
- SUSE Bug 1013678
Описание
The _parse_pat function in the mpegts parser in GStreamer before 1.10.2 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted file.
Затронутые продукты
Ссылки
- CVE-2016-9813
- SUSE Bug 1013680