Use-after-free in gstreamer - CVE-2021-3497

Vulnerability identifier: #VU69294

CSH Severity: High

CVSS v4: 8.4 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2021-3497

CWE-ID: CWE-416

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to compromise vulnerable system.

The vulnerability exists due to a use-after-free error when demuxing certain malformed Matroska files. A remote attacker can trick the victim into opening a specially crafted file, trigger a use-after-free error and execute arbitrary code on the system.

Successful exploitation of the vulnerability may allow an attacker to compromise vulnerable system.

gstreamer
Oracle Linux
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Server for SAP Applications 15
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for ARM 64
SUSE Linux Enterprise Server
SUSE Linux Enterprise Server 15 SP1 LTSS
gstreamer1-plugins-good (Red Hat package)
gstreamer-plugins-good
gstreamer-plugins-good-debuginfo
gstreamer-plugins-good-debugsource
gstreamer-plugins-good-lang

Install updates from vendor's website.

gstreamer - update to 1.18.4
gstreamer1-plugins-good (Red Hat package) - update to 1.16.1-3.el8
gstreamer-plugins-good - addressed in versions 1.8.3-16.3.1, 1.12.5-150000.3.7.2
gstreamer-plugins-good-debuginfo - addressed in versions 1.8.3-16.3.1, 1.12.5-150000.3.7.2
gstreamer-plugins-good-debugsource - addressed in versions 1.8.3-16.3.1, 1.12.5-150000.3.7.2
gstreamer-plugins-good-lang - addressed in versions 1.8.3-16.3.1, 1.12.5-150000.3.7.2

• https://gstreamer.freedesktop.org/security/sa-2021-0002.html
• https://bugzilla.redhat.com/show_bug.cgi?id=1945339

• Remote code execution in GStreamer
• Red Hat Enterprise Linux 8 update for gstreamer1-plugins-good
• SUSE update for gstreamer-plugins-good
• Multiple vulnerabilities in Oracle Linux
• SUSE update for gstreamer-plugins-good