In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applicationsUpgrade RHEL:9
gstreamer1-plugins-base-devel
to version 0:1.22.1-3.el9_5 or higher.
This issue was patched in RHSA-2024:11123
.
Note: Versions mentioned in the description apply only to the upstream gstreamer1-plugins-base-devel
package and not the gstreamer1-plugins-base-devel
package as distributed by RHEL
.
See How to fix?
for RHEL:9
relevant fixed versions and status.
GStreamer is a library for constructing graphs of media-handling components. stack-buffer overflow has been detected in the gst_opus_dec_parse_header function within `gstopusdec.c'. The pos array is a stack-allocated buffer of size 64. If n_channels exceeds 64, the for loop will write beyond the boundaries of the pos array. The value written will always be GST_AUDIO_CHANNEL_POSITION_NONE. This bug allows to overwrite the EIP address allocated in the stack. This vulnerability is fixed in 1.24.10.