Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2020:1300-2

Опубликовано: 07 июл. 2020
Источник: suse-cvrf

Описание

Security update for gstreamer-plugins-base

This update for gstreamer-plugins-base fixes the following issue:

Security issue fixed:

  • CVE-2019-9928: Fixed a heap-based overflow in the rtsp connection parser (bsc#1133375).

Список пакетов

SUSE Linux Enterprise Module for Package Hub 15 SP1
libgstaudio-1_0-0-32bit-1.12.5-3.3.1
libgsttag-1_0-0-32bit-1.12.5-3.3.1
libgstvideo-1_0-0-32bit-1.12.5-3.3.1

Описание

GStreamer before 1.16.0 has a heap-based buffer overflow in the RTSP connection parser via a crafted response from a server, potentially allowing remote code execution.


Затронутые продукты
SUSE Linux Enterprise Module for Package Hub 15 SP1:libgstaudio-1_0-0-32bit-1.12.5-3.3.1
SUSE Linux Enterprise Module for Package Hub 15 SP1:libgsttag-1_0-0-32bit-1.12.5-3.3.1
SUSE Linux Enterprise Module for Package Hub 15 SP1:libgstvideo-1_0-0-32bit-1.12.5-3.3.1

Ссылки
Уязвимость SUSE-SU-2020:1300-2