ALT-PU-2019-1701-1

Package update gstreamer1.0 in branch sisyphus

Version1.16.0-alt1

Published2019-04-20

Max severityHIGH

Severity:

Closed issues (2)

HIGH8.8

Уязвимость синтаксического анализатора RTSP-соединений мультимедийного фреймворка Gstreamer, позволяющая нарушителю выполнить произвольный код

Published: 2019-07-16Modified: 2024-09-30

CVSS 3.xHIGH 8.8

CVSS:3.x/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CVSS 2.0CRITICAL 9.0

CVSS:2.0/AV:N/AC:L/Au:S/C:C/I:C/A:C

References

CVE-2019-9928

HIGH8.8

GStreamer before 1.16.0 has a heap-based buffer overflow in the RTSP connection parser via a crafted response from a server, potentially allowing remote code execution.

Published: 2019-04-24Modified: 2026-03-17

CVSS 2.0MEDIUM 6.8

CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:P

CVSS 3.xHIGH 8.8

CVSS:3.x/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

References