CVE-2021-3185
gstreamer: buffer overflow in gst_h264_slice_parse_dec_ref_pic_marking
Kaynağa göre önem derecesi
Trivy'nin kendi etiketi CRITICAL. Kritik diyenler: NVD, Photon OS. Daha düşük diyenler: Red Hat (orta), Ubuntu (orta).
Açıklama
A flaw was found in the gstreamer h264 component of gst-plugins-bad before v1.18.1 where when parsing a h264 header, an attacker could cause the stack to be smashed, memory corruption and possibly code execution.
Etkilenen paketler ve düzeltilmiş sürümler
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| Photon OS 4.0 | gst-plugins-bad, gst-plugins-bad-devel | 1.17.1-2.ph4 |
| debian 10 | gst-plugins-bad1.0 | 1.14.4-1deb10u1 |
| debian 11 | gst-plugins-bad1.0 | 1.18.1-1 |
| debian 12 | gst-plugins-bad1.0 | 1.18.1-1 |
| debian 13 | gst-plugins-bad1.0 | 1.18.1-1 |
| debian 14 | gst-plugins-bad1.0 | 1.18.1-1 |
| debian 9 | gst-plugins-bad1.0 | 1.10.4-1+deb9u1 |
| echo | gst-plugins-bad1.0 | 1.18.1-1 |
| Red Hat | gstreamer-plugins-bad-free, gstreamer-plugins-bad-free-devel, gstreamer-plugins-bad-free-devel-docs ve 3 tane daha | düzeltme belirtilmemiş |
| root.io debian 12 | rootio-gst-plugins-bad1.0 | 1.18.1-1 |
| ubuntu 18.04-ESM | gst-plugins-bad1.0 | düzeltme belirtilmemiş |
11 kaynaktaki 17 kaydın hepsini göster
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| Photon OS 4.0 | gst-plugins-bad | 1.17.1-2.ph4 |
| Photon OS 4.0 | gst-plugins-bad-devel | 1.17.1-2.ph4 |
| debian 10 | gst-plugins-bad1.0 | 1.14.4-1deb10u1 |
| debian 11 | gst-plugins-bad1.0 | 1.18.1-1 |
| debian 12 | gst-plugins-bad1.0 | 1.18.1-1 |
| debian 13 | gst-plugins-bad1.0 | 1.18.1-1 |
| debian 14 | gst-plugins-bad1.0 | 1.18.1-1 |
| debian 9 | gst-plugins-bad1.0 | 1.10.4-1+deb9u1 |
| echo | gst-plugins-bad1.0 | 1.18.1-1 |
| Red Hat | gstreamer-plugins-bad-free | düzeltme belirtilmemiş |
| Red Hat | gstreamer-plugins-bad-free-devel | düzeltme belirtilmemiş |
| Red Hat | gstreamer-plugins-bad-free-devel-docs | düzeltme belirtilmemiş |
| Red Hat | gstreamer-plugins-bad-free-extras | düzeltme belirtilmemiş |
| Red Hat | gstreamer1-plugins-bad-free | düzeltme belirtilmemiş |
| Red Hat | gstreamer1-plugins-bad-free-devel | düzeltme belirtilmemiş |
| root.io debian 12 | rootio-gst-plugins-bad1.0 | 1.18.1-1 |
| ubuntu 18.04-ESM | gst-plugins-bad1.0 | düzeltme belirtilmemiş |