Threats Tagged 'cve-2024-47538'

Multiple security vulnerabilities have been identified in the gstreamer1-plugins-base package used in Red Hat Enterprise Linux 9.2 Extended Update Support. These include stack-buffer overflow issues in vorbis_handle_identification_packet (CVE-2024-47538) and gst_opus_dec_parse_header (CVE-2024-47607), as well as an out-of-bounds write in the Ogg demuxer (CVE-2024-47615). These vulnerabilities could potentially lead to memory corruption. Red Hat has released security updates addressing these issues for various architectures and product variants of RHEL 9.2. The update is rated as Important by Red Hat Product Security. No CVSS scores are provided in the advisory. No known exploits in the wild have been reported at this time.

Multiple vulnerabilities have been identified in the gstreamer1-plugins-base package used in Red Hat Enterprise Linux 9.4 Extended Update Support. These include stack-buffer overflows in vorbis_handle_identification_packet (CVE-2024-47538) and gst_opus_dec_parse_header (CVE-2024-47607), as well as an out-of-bounds write in the Ogg demuxer (CVE-2024-47615). These issues could lead to memory corruption. Red Hat has issued an important security advisory with updates to address these vulnerabilities.

Multiple security vulnerabilities have been identified in the gstreamer1-plugins-base package used in Red Hat Enterprise Linux 9. These include stack-buffer overflows in vorbis_handle_identification_packet and gst_opus_dec_parse_header, as well as an out-of-bounds write in the Ogg demuxer. Red Hat has issued an important security advisory with updates to address these issues. The vulnerabilities affect various architectures and extended update support versions of Red Hat Enterprise Linux 9. No CVSS scores are provided, but the issues are rated as having a high security impact.

Multiple security vulnerabilities have been identified in the gstreamer1-plugins-base package used in Red Hat Enterprise Linux 8.2. These include stack-buffer overflows and an out-of-bounds write affecting components that handle media data streams such as Vorbis and Opus audio codecs and the Ogg demuxer. The vulnerabilities are rated as important by Red Hat and have corresponding CVEs: CVE-2024-47538, CVE-2024-47607, and CVE-2024-47615. A security update addressing these issues has been released for Red Hat Enterprise Linux 8.2.

Multiple security vulnerabilities have been identified in the gstreamer1-plugins-base package used in Red Hat Enterprise Linux 8.6. These include stack-buffer overflows in vorbis_handle_identification_packet (CVE-2024-47538) and gst_opus_dec_parse_header (CVE-2024-47607), as well as an out-of-bounds write in the Ogg demuxer (CVE-2024-47615). Red Hat has issued a security advisory (RHSA-2024:11141) addressing these issues with updated packages. The vulnerabilities are rated as important by Red Hat Product Security. Users of affected Red Hat Enterprise Linux 8.6 variants should apply the provided updates to remediate these issues.

Multiple vulnerabilities have been identified in the gstreamer1-plugins-base package used in Red Hat Enterprise Linux 8.8 Extended Update Support. These include stack-buffer overflows in vorbis_handle_identification_packet (CVE-2024-47538) and gst_opus_dec_parse_header (CVE-2024-47607), as well as an out-of-bounds write in the Ogg demuxer (CVE-2024-47615). These issues could potentially lead to memory corruption. Red Hat has released security updates addressing these vulnerabilities.

Multiple security vulnerabilities have been identified in the gstreamer1-plugins-base package used in Red Hat Enterprise Linux 8.4. These include stack-buffer overflows in vorbis_handle_identification_packet and gst_opus_dec_parse_header, as well as an out-of-bounds write in the Ogg demuxer. Red Hat has issued an important security advisory with updates to address these issues.

Multiple security vulnerabilities have been identified in the gstreamer1-plugins-base package used in Red Hat Enterprise Linux 8. These include stack-buffer overflows in vorbis_handle_identification_packet (CVE-2024-47538) and gst_opus_dec_parse_header (CVE-2024-47607), as well as an out-of-bounds write in the Ogg demuxer (CVE-2024-47615). These issues could potentially lead to memory corruption. Red Hat has released security updates addressing these vulnerabilities for various architectures and Extended Life Cycle versions of RHEL 8.

GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages contain a collection of well-supported plug-ins of good quality and under the LGPL license. Security Fix(es): * gstreamer1-plugins-good: uninitialized stack memory in Matroska/WebM demuxer (CVE-2024-47540) * gstreamer1-plugins-good: OOB-write in isomp4/qtdemux.c (CVE-2024-47537) * gstreamer1-plugins-good: OOB-write in convert_to_s334_1a (CVE-2024-47539) * gstreamer1-plugins-good: null pointer dereference in gst_gdk_pixbuf_dec_flush (CVE-2024-47613) * gstreamer1-plugins-good: integer overflows in MP4/MOV demuxer and memory allocator that can lead to out-of-bounds writes (CVE-2024-47606) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.