Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2017:0847-1

Опубликовано: 29 мар. 2017
Источник: suse-cvrf

Описание

Security update for gstreamer-0_10-plugins-good

This update for gstreamer-0_10-plugins-good fixes the following issues:

Security issues fixed:

  • CVE-2016-9634, CVE-2016-9635: add some bounds checking (boo#1012102 boo#1012103).
  • CVE-2016-9636: fix casting for some comparisons (boo#1012104).
  • CVE-2016-9807, CVE-2016-9808: rewrite logic using GsgtByteReader/Writer (boo#1013653 boo#1013655).
  • CVE-2016-9810: don't unref() parent in the chain function (boo#1013663).

Список пакетов

openSUSE Leap 42.2
gstreamer-0_10-plugin-esd-0.10.31-17.3.1
gstreamer-0_10-plugin-esd-32bit-0.10.31-17.3.1
gstreamer-0_10-plugins-good-0.10.31-17.3.1
gstreamer-0_10-plugins-good-32bit-0.10.31-17.3.1
gstreamer-0_10-plugins-good-doc-0.10.31-17.3.1
gstreamer-0_10-plugins-good-extra-0.10.31-17.3.1
gstreamer-0_10-plugins-good-extra-32bit-0.10.31-17.3.1
gstreamer-0_10-plugins-good-lang-0.10.31-17.3.1

Ссылки

Описание

Heap-based buffer overflow in the flx_decode_delta_fli function in gst/flx/gstflxdec.c in the FLIC decoder in GStreamer before 1.10.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via the start_line parameter.

Затронутые продукты
openSUSE Leap 42.2:gstreamer-0_10-plugin-esd-0.10.31-17.3.1
openSUSE Leap 42.2:gstreamer-0_10-plugin-esd-32bit-0.10.31-17.3.1
openSUSE Leap 42.2:gstreamer-0_10-plugins-good-0.10.31-17.3.1
openSUSE Leap 42.2:gstreamer-0_10-plugins-good-32bit-0.10.31-17.3.1
Ссылки

Описание

Heap-based buffer overflow in the flx_decode_delta_fli function in gst/flx/gstflxdec.c in the FLIC decoder in GStreamer before 1.10.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) by providing a 'skip count' that goes beyond initialized buffer.

Затронутые продукты
openSUSE Leap 42.2:gstreamer-0_10-plugin-esd-0.10.31-17.3.1
openSUSE Leap 42.2:gstreamer-0_10-plugin-esd-32bit-0.10.31-17.3.1
openSUSE Leap 42.2:gstreamer-0_10-plugins-good-0.10.31-17.3.1
openSUSE Leap 42.2:gstreamer-0_10-plugins-good-32bit-0.10.31-17.3.1
Ссылки

Описание

Heap-based buffer overflow in the flx_decode_delta_fli function in gst/flx/gstflxdec.c in the FLIC decoder in GStreamer before 1.10.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) by providing a 'write count' that goes beyond the initialized buffer.

Затронутые продукты
openSUSE Leap 42.2:gstreamer-0_10-plugin-esd-0.10.31-17.3.1
openSUSE Leap 42.2:gstreamer-0_10-plugin-esd-32bit-0.10.31-17.3.1
openSUSE Leap 42.2:gstreamer-0_10-plugins-good-0.10.31-17.3.1
openSUSE Leap 42.2:gstreamer-0_10-plugins-good-32bit-0.10.31-17.3.1
Ссылки

Описание

The flx_decode_chunks function in gst/flx/gstflxdec.c in GStreamer before 1.10.2 allows remote attackers to cause a denial of service (invalid memory read and crash) via a crafted FLIC file.

Затронутые продукты
openSUSE Leap 42.2:gstreamer-0_10-plugin-esd-0.10.31-17.3.1
openSUSE Leap 42.2:gstreamer-0_10-plugin-esd-32bit-0.10.31-17.3.1
openSUSE Leap 42.2:gstreamer-0_10-plugins-good-0.10.31-17.3.1
openSUSE Leap 42.2:gstreamer-0_10-plugins-good-32bit-0.10.31-17.3.1
Ссылки

Описание

The FLIC decoder in GStreamer before 1.10.2 allows remote attackers to cause a denial of service (out-of-bounds write and crash) via a crafted series of skip and count pairs.

Затронутые продукты
openSUSE Leap 42.2:gstreamer-0_10-plugin-esd-0.10.31-17.3.1
openSUSE Leap 42.2:gstreamer-0_10-plugin-esd-32bit-0.10.31-17.3.1
openSUSE Leap 42.2:gstreamer-0_10-plugins-good-0.10.31-17.3.1
openSUSE Leap 42.2:gstreamer-0_10-plugins-good-32bit-0.10.31-17.3.1
Ссылки

Описание

The gst_decode_chain_free_internal function in the flxdex decoder in gst-plugins-good in GStreamer before 1.10.2 allows remote attackers to cause a denial of service (invalid memory read and crash) via an invalid file, which triggers an incorrect unref call.

Затронутые продукты
openSUSE Leap 42.2:gstreamer-0_10-plugin-esd-0.10.31-17.3.1
openSUSE Leap 42.2:gstreamer-0_10-plugin-esd-32bit-0.10.31-17.3.1
openSUSE Leap 42.2:gstreamer-0_10-plugins-good-0.10.31-17.3.1
openSUSE Leap 42.2:gstreamer-0_10-plugins-good-32bit-0.10.31-17.3.1
Ссылки