Heap-based buffer overflow in gstreamer - CVE-2023-37328

Vulnerability identifier: #VU77966

CSH Severity: High

CVSS v4: 9.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2023-37328

CWE-ID: CWE-122

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error in the PGS blu-ray subtitle decoder when handling certain files. A remote attacker can pass specially crafted data to the application, trigger a heap-based buffer overflow and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

gstreamer
Debian Linux
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise High Performance Computing 12
SUSE Linux Enterprise Server 12
SUSE Linux Enterprise High Performance Computing ESPOS 15
SUSE Linux Enterprise High Performance Computing LTSS 15
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise Desktop 15
SUSE Linux Enterprise Server for SAP Applications 12
SUSE Linux Enterprise Software Development Kit 12
SUSE CaaS Platform
SUSE Manager Server
SUSE Manager Retail Branch Server
SUSE Manager Proxy
SUSE Linux Enterprise Micro for Rancher
SUSE Linux Enterprise Micro
openSUSE Leap Micro
SUSE Enterprise Storage
Anolis OS
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for IBM z Systems
SUSE Linux Enterprise Server 12 SP2 BCL
SUSE Linux Enterprise Workstation Extension 12
SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS
SUSE Linux Enterprise Server 15 SP1 LTSS
SUSE Linux Enterprise Server 15 SP2 LTSS
SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS
SUSE Linux Enterprise Server 15 SP3 LTSS
Basesystem Module
SUSE Package Hub 15
openSUSE Leap
Ubuntu
openEuler
Fedora
OpenShift API for Data Protection (OADP)
gst-plugins-base1.0 (Ubuntu package)
libgstapp-1_0-0-debuginfo-32bit
typelib-1_0-GstAudio-1_0
libgstsdp-1_0-0-debuginfo
libgstsdp-1_0-0
libgstaudio-1_0-0
gstreamer-plugins-base
libgstpbutils-1_0-0-debuginfo-32bit
libgstapp-1_0-0-debuginfo
libgstaudio-1_0-0-debuginfo-32bit
libgsttag-1_0-0-32bit
typelib-1_0-GstRtsp-1_0
typelib-1_0-GstFft-1_0
typelib-1_0-GstRtp-1_0
typelib-1_0-GstAllocators-1_0
typelib-1_0-GstSdp-1_0
typelib-1_0-GstApp-1_0
typelib-1_0-GstVideo-1_0
gstreamer-plugins-base-debugsource
libgstfft-1_0-0-32bit
gstreamer-plugins-base-debuginfo
typelib-1_0-GstPbutils-1_0
libgstfft-1_0-0-debuginfo-32bit
gstreamer-plugins-base-debuginfo-32bit
typelib-1_0-GstTag-1_0
gstreamer-plugins-base-devel
libgstvideo-1_0-0-debuginfo
gstreamer-plugins-base-lang
libgstrtsp-1_0-0-debuginfo
libgstallocators-1_0-0-debuginfo
libgstpbutils-1_0-0-debuginfo
libgstriff-1_0-0-debuginfo
libgstrtsp-1_0-0
libgstrtp-1_0-0-debuginfo
libgstfft-1_0-0-debuginfo
libgstvideo-1_0-0-32bit
libgstriff-1_0-0
libgsttag-1_0-0-debuginfo
libgstvideo-1_0-0
libgstpbutils-1_0-0-32bit
libgstallocators-1_0-0
libgstapp-1_0-0
libgstaudio-1_0-0-32bit
libgstapp-1_0-0-32bit
libgstvideo-1_0-0-debuginfo-32bit
libgstpbutils-1_0-0
libgstfft-1_0-0
libgsttag-1_0-0
libgstaudio-1_0-0-debuginfo
libgsttag-1_0-0-debuginfo-32bit
libgstrtp-1_0-0
gstreamer1-plugins-base-help
gstreamer1-plugins-base-devel
gstreamer1-plugins-base-debuginfo
gstreamer1-plugins-base-debugsource
gstreamer1-plugins-base
gstreamer1.0-plugins-base (Ubuntu package)
libgstgl-1_0-0-debuginfo
libgstgl-1_0-0
typelib-1_0-GstGL-1_0
gstreamer-plugins-base-doc
gst-plugins-bad1.0 (Debian package)
typelib-1_0-GstGLX11-1_0
typelib-1_0-GstGLEGL-1_0
libgstrtsp-1_0-0-32bit
libgstriff-1_0-0-32bit
libgstvideo-1_0-0-64bit
libgstallocators-1_0-0-64bit-debuginfo
libgstvideo-1_0-0-64bit-debuginfo
libgstapp-1_0-0-64bit
libgstsdp-1_0-0-64bit
libgstfft-1_0-0-64bit
libgstsdp-1_0-0-64bit-debuginfo
libgstrtp-1_0-0-32bit-debuginfo
libgstaudio-1_0-0-64bit
libgstsdp-1_0-0-32bit
gstreamer-plugins-base-32bit
libgstsdp-1_0-0-32bit-debuginfo
libgstapp-1_0-0-32bit-debuginfo
libgstallocators-1_0-0-32bit-debuginfo
libgstrtsp-1_0-0-32bit-debuginfo
libgstvideo-1_0-0-32bit-debuginfo
libgstallocators-1_0-0-64bit
libgstpbutils-1_0-0-64bit
gstreamer-plugins-base-64bit-debuginfo
libgstrtsp-1_0-0-64bit-debuginfo
gstreamer-plugins-base-devel-64bit
libgstapp-1_0-0-64bit-debuginfo
libgstriff-1_0-0-64bit-debuginfo
libgsttag-1_0-0-64bit-debuginfo
gstreamer-plugins-base-64bit
libgstrtp-1_0-0-64bit
libgstfft-1_0-0-32bit-debuginfo
libgstgl-1_0-0-64bit-debuginfo
libgstaudio-1_0-0-64bit-debuginfo
libgstfft-1_0-0-64bit-debuginfo
libgstgl-1_0-0-64bit
libgsttag-1_0-0-64bit
libgstrtsp-1_0-0-64bit
libgstpbutils-1_0-0-64bit-debuginfo
libgstrtp-1_0-0-64bit-debuginfo
libgstriff-1_0-0-64bit
typelib-1_0-GstGLWayland-1_0
gstreamer-plugins-base-32bit-debuginfo
libgstriff-1_0-0-32bit-debuginfo
libgsttag-1_0-0-32bit-debuginfo
libgstallocators-1_0-0-32bit
libgstgl-1_0-0-32bit-debuginfo
gstreamer-plugins-base-devel-32bit
libgstrtp-1_0-0-32bit
libgstpbutils-1_0-0-32bit-debuginfo
libgstgl-1_0-0-32bit
libgstaudio-1_0-0-32bit-debuginfo
gstreamer1-plugins-base (Red Hat package)
mingw-gstreamer1-plugins-good
mingw-gstreamer1-plugins-base
mingw-gstreamer1-plugins-bad-free
mingw-gstreamer1
Red Hat OpenShift Container Platform
Red Hat Migration Toolkit for Applications

Install updates from vendor's website.

gstreamer - update to 1.22.4
OpenShift API for Data Protection (OADP) - update to 1.3.2
gst-plugins-base1.0 (Ubuntu package) - addressed in versions 1.8.3-1ubuntu0.3+esm2, 1.14.5-0ubuntu1~18.04.3+esm1
libgstapp-1_0-0-debuginfo-32bit - addressed in versions 1.8.3-13.9.1, 1.8.3-13.12.1
typelib-1_0-GstAudio-1_0 - addressed in versions 1.8.3-13.9.1, 1.8.3-13.12.1, 1.12.5-150000.3.6.1, 1.16.3-150200.4.9.2, 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
libgstsdp-1_0-0-debuginfo - addressed in versions 1.8.3-13.9.1, 1.8.3-13.12.1, 1.12.5-150000.3.6.1, 1.16.3-150200.4.9.2, 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
libgstsdp-1_0-0 - addressed in versions 1.8.3-13.9.1, 1.8.3-13.12.1, 1.12.5-150000.3.6.1, 1.16.3-150200.4.9.2, 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
libgstaudio-1_0-0 - addressed in versions 1.8.3-13.9.1, 1.8.3-13.12.1, 1.12.5-150000.3.6.1, 1.16.3-150200.4.9.2, 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
gstreamer-plugins-base - addressed in versions 1.8.3-13.9.1, 1.8.3-13.12.1, 1.12.5-150000.3.6.1, 1.16.3-150200.4.9.2, 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
libgstpbutils-1_0-0-debuginfo-32bit - addressed in versions 1.8.3-13.9.1, 1.8.3-13.12.1
libgstapp-1_0-0-debuginfo - addressed in versions 1.8.3-13.9.1, 1.8.3-13.12.1, 1.12.5-150000.3.6.1, 1.16.3-150200.4.9.2, 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
libgstaudio-1_0-0-debuginfo-32bit - addressed in versions 1.8.3-13.9.1, 1.8.3-13.12.1
libgsttag-1_0-0-32bit - addressed in versions 1.8.3-13.9.1, 1.8.3-13.12.1, 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
typelib-1_0-GstRtsp-1_0 - addressed in versions 1.8.3-13.9.1, 1.8.3-13.12.1, 1.12.5-150000.3.6.1, 1.16.3-150200.4.9.2, 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
typelib-1_0-GstFft-1_0 - addressed in versions 1.8.3-13.9.1, 1.8.3-13.12.1, 1.12.5-150000.3.6.1
typelib-1_0-GstRtp-1_0 - addressed in versions 1.8.3-13.9.1, 1.8.3-13.12.1, 1.12.5-150000.3.6.1, 1.16.3-150200.4.9.2, 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
typelib-1_0-GstAllocators-1_0 - addressed in versions 1.8.3-13.9.1, 1.8.3-13.12.1, 1.12.5-150000.3.6.1, 1.16.3-150200.4.9.2, 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
typelib-1_0-GstSdp-1_0 - addressed in versions 1.8.3-13.9.1, 1.8.3-13.12.1, 1.12.5-150000.3.6.1, 1.16.3-150200.4.9.2, 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
typelib-1_0-GstApp-1_0 - addressed in versions 1.8.3-13.9.1, 1.8.3-13.12.1, 1.12.5-150000.3.6.1, 1.16.3-150200.4.9.2, 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
typelib-1_0-GstVideo-1_0 - addressed in versions 1.8.3-13.9.1, 1.8.3-13.12.1, 1.12.5-150000.3.6.1, 1.16.3-150200.4.9.2, 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
gstreamer-plugins-base-debugsource - addressed in versions 1.8.3-13.9.1, 1.8.3-13.12.1, 1.12.5-150000.3.6.1, 1.16.3-150200.4.9.2, 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
libgstfft-1_0-0-32bit - addressed in versions 1.8.3-13.9.1, 1.8.3-13.12.1, 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
gstreamer-plugins-base-debuginfo - addressed in versions 1.8.3-13.9.1, 1.8.3-13.12.1, 1.12.5-150000.3.6.1, 1.16.3-150200.4.9.2, 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
typelib-1_0-GstPbutils-1_0 - addressed in versions 1.8.3-13.9.1, 1.8.3-13.12.1, 1.12.5-150000.3.6.1, 1.16.3-150200.4.9.2, 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
libgstfft-1_0-0-debuginfo-32bit - addressed in versions 1.8.3-13.9.1, 1.8.3-13.12.1
gstreamer-plugins-base-debuginfo-32bit - addressed in versions 1.8.3-13.9.1, 1.8.3-13.12.1
typelib-1_0-GstTag-1_0 - addressed in versions 1.8.3-13.9.1, 1.8.3-13.12.1, 1.12.5-150000.3.6.1, 1.16.3-150200.4.9.2, 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
gstreamer-plugins-base-devel - addressed in versions 1.8.3-13.9.1, 1.8.3-13.12.1, 1.12.5-150000.3.6.1, 1.16.3-150200.4.9.2, 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
libgstvideo-1_0-0-debuginfo - addressed in versions 1.8.3-13.9.1, 1.8.3-13.12.1, 1.12.5-150000.3.6.1, 1.16.3-150200.4.9.2, 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
gstreamer-plugins-base-lang - addressed in versions 1.8.3-13.9.1, 1.8.3-13.12.1, 1.12.5-150000.3.6.1, 1.16.3-150200.4.9.2, 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
libgstrtsp-1_0-0-debuginfo - addressed in versions 1.8.3-13.9.1, 1.8.3-13.12.1, 1.12.5-150000.3.6.1, 1.16.3-150200.4.9.2, 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
libgstallocators-1_0-0-debuginfo - addressed in versions 1.8.3-13.9.1, 1.8.3-13.12.1, 1.12.5-150000.3.6.1, 1.16.3-150200.4.9.2, 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
libgstpbutils-1_0-0-debuginfo - addressed in versions 1.8.3-13.9.1, 1.8.3-13.12.1, 1.12.5-150000.3.6.1, 1.16.3-150200.4.9.2, 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
libgstriff-1_0-0-debuginfo - addressed in versions 1.8.3-13.9.1, 1.8.3-13.12.1, 1.12.5-150000.3.6.1, 1.16.3-150200.4.9.2, 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
libgstrtsp-1_0-0 - addressed in versions 1.8.3-13.9.1, 1.8.3-13.12.1, 1.12.5-150000.3.6.1, 1.16.3-150200.4.9.2, 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
libgstrtp-1_0-0-debuginfo - addressed in versions 1.8.3-13.9.1, 1.8.3-13.12.1, 1.12.5-150000.3.6.1, 1.16.3-150200.4.9.2, 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
libgstfft-1_0-0-debuginfo - addressed in versions 1.8.3-13.9.1, 1.8.3-13.12.1, 1.12.5-150000.3.6.1, 1.16.3-150200.4.9.2, 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
libgstvideo-1_0-0-32bit - addressed in versions 1.8.3-13.9.1, 1.8.3-13.12.1, 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
libgstriff-1_0-0 - addressed in versions 1.8.3-13.9.1, 1.8.3-13.12.1, 1.12.5-150000.3.6.1, 1.16.3-150200.4.9.2, 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
libgsttag-1_0-0-debuginfo - addressed in versions 1.8.3-13.9.1, 1.8.3-13.12.1, 1.12.5-150000.3.6.1, 1.16.3-150200.4.9.2, 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
libgstvideo-1_0-0 - addressed in versions 1.8.3-13.9.1, 1.8.3-13.12.1, 1.12.5-150000.3.6.1, 1.16.3-150200.4.9.2, 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
libgstpbutils-1_0-0-32bit - addressed in versions 1.8.3-13.9.1, 1.8.3-13.12.1, 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
libgstallocators-1_0-0 - addressed in versions 1.8.3-13.9.1, 1.8.3-13.12.1, 1.12.5-150000.3.6.1, 1.16.3-150200.4.9.2, 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
libgstapp-1_0-0 - addressed in versions 1.8.3-13.9.1, 1.8.3-13.12.1, 1.12.5-150000.3.6.1, 1.16.3-150200.4.9.2, 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
libgstaudio-1_0-0-32bit - addressed in versions 1.8.3-13.9.1, 1.8.3-13.12.1, 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
libgstapp-1_0-0-32bit - addressed in versions 1.8.3-13.9.1, 1.8.3-13.12.1, 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
libgstvideo-1_0-0-debuginfo-32bit - addressed in versions 1.8.3-13.9.1, 1.8.3-13.12.1
libgstpbutils-1_0-0 - addressed in versions 1.8.3-13.9.1, 1.8.3-13.12.1, 1.12.5-150000.3.6.1, 1.16.3-150200.4.9.2, 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
libgstfft-1_0-0 - addressed in versions 1.8.3-13.9.1, 1.8.3-13.12.1, 1.12.5-150000.3.6.1, 1.16.3-150200.4.9.2, 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
libgsttag-1_0-0 - addressed in versions 1.8.3-13.9.1, 1.8.3-13.12.1, 1.12.5-150000.3.6.1, 1.16.3-150200.4.9.2, 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
libgstaudio-1_0-0-debuginfo - addressed in versions 1.8.3-13.9.1, 1.8.3-13.12.1, 1.12.5-150000.3.6.1, 1.16.3-150200.4.9.2, 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
libgsttag-1_0-0-debuginfo-32bit - addressed in versions 1.8.3-13.9.1, 1.8.3-13.12.1
libgstrtp-1_0-0 - addressed in versions 1.8.3-13.9.1, 1.8.3-13.12.1, 1.12.5-150000.3.6.1, 1.16.3-150200.4.9.2, 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
gstreamer1-plugins-base-help - addressed in versions 1.16.2-3, 1.16.2-4, 1.18.4-6
gstreamer1-plugins-base-devel - addressed in versions 1.16.2-3, 1.16.2-4, 1.18.4-6
gstreamer1-plugins-base-debuginfo - addressed in versions 1.16.2-3, 1.16.2-4, 1.18.4-6
gstreamer1-plugins-base-debugsource - addressed in versions 1.16.2-3, 1.16.2-4, 1.18.4-6
gstreamer1-plugins-base - addressed in versions 1.16.2-3, 1.16.2-4, 1.18.4-6
gstreamer1.0-plugins-base (Ubuntu package) - addressed in versions 1.16.3-0ubuntu1.2, 1.20.1-1ubuntu0.1, 1.22.1-1ubuntu1.1
libgstgl-1_0-0-debuginfo - addressed in versions 1.16.3-150200.4.9.2, 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
libgstgl-1_0-0 - addressed in versions 1.16.3-150200.4.9.2, 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
typelib-1_0-GstGL-1_0 - addressed in versions 1.16.3-150200.4.9.2, 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
gstreamer-plugins-base-doc - update to 1.16.3-150200.4.9.2
gst-plugins-bad1.0 (Debian package) - addressed in versions 1.18.4-3+deb11u1, 1.22.0-4+deb12u1
typelib-1_0-GstGLX11-1_0 - addressed in versions 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
typelib-1_0-GstGLEGL-1_0 - addressed in versions 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
libgstrtsp-1_0-0-32bit - addressed in versions 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
libgstriff-1_0-0-32bit - addressed in versions 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
libgstvideo-1_0-0-64bit - addressed in versions 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
libgstallocators-1_0-0-64bit-debuginfo - addressed in versions 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
libgstvideo-1_0-0-64bit-debuginfo - addressed in versions 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
libgstapp-1_0-0-64bit - addressed in versions 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
libgstsdp-1_0-0-64bit - addressed in versions 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
libgstfft-1_0-0-64bit - addressed in versions 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
libgstsdp-1_0-0-64bit-debuginfo - addressed in versions 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
libgstrtp-1_0-0-32bit-debuginfo - addressed in versions 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
libgstaudio-1_0-0-64bit - addressed in versions 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
libgstsdp-1_0-0-32bit - addressed in versions 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
gstreamer-plugins-base-32bit - addressed in versions 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
libgstsdp-1_0-0-32bit-debuginfo - addressed in versions 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
libgstapp-1_0-0-32bit-debuginfo - addressed in versions 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
libgstallocators-1_0-0-32bit-debuginfo - addressed in versions 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
libgstrtsp-1_0-0-32bit-debuginfo - addressed in versions 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
libgstvideo-1_0-0-32bit-debuginfo - addressed in versions 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
libgstallocators-1_0-0-64bit - addressed in versions 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
libgstpbutils-1_0-0-64bit - addressed in versions 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
gstreamer-plugins-base-64bit-debuginfo - addressed in versions 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
libgstrtsp-1_0-0-64bit-debuginfo - addressed in versions 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
gstreamer-plugins-base-devel-64bit - addressed in versions 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
libgstapp-1_0-0-64bit-debuginfo - addressed in versions 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
libgstriff-1_0-0-64bit-debuginfo - addressed in versions 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
libgsttag-1_0-0-64bit-debuginfo - addressed in versions 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
gstreamer-plugins-base-64bit - addressed in versions 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
libgstrtp-1_0-0-64bit - addressed in versions 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
libgstfft-1_0-0-32bit-debuginfo - addressed in versions 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
libgstgl-1_0-0-64bit-debuginfo - addressed in versions 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
libgstaudio-1_0-0-64bit-debuginfo - addressed in versions 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
libgstfft-1_0-0-64bit-debuginfo - addressed in versions 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
libgstgl-1_0-0-64bit - addressed in versions 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
libgsttag-1_0-0-64bit - addressed in versions 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
libgstrtsp-1_0-0-64bit - addressed in versions 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
libgstpbutils-1_0-0-64bit-debuginfo - addressed in versions 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
libgstrtp-1_0-0-64bit-debuginfo - addressed in versions 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
libgstriff-1_0-0-64bit - addressed in versions 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
typelib-1_0-GstGLWayland-1_0 - addressed in versions 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
gstreamer-plugins-base-32bit-debuginfo - addressed in versions 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
libgstriff-1_0-0-32bit-debuginfo - addressed in versions 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
libgsttag-1_0-0-32bit-debuginfo - addressed in versions 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
libgstallocators-1_0-0-32bit - addressed in versions 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
libgstgl-1_0-0-32bit-debuginfo - addressed in versions 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
gstreamer-plugins-base-devel-32bit - addressed in versions 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
libgstrtp-1_0-0-32bit - addressed in versions 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
libgstpbutils-1_0-0-32bit-debuginfo - addressed in versions 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
libgstgl-1_0-0-32bit - addressed in versions 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
libgstaudio-1_0-0-32bit-debuginfo - addressed in versions 1.20.1-150400.3.3.1, 1.22.0-150500.3.3.1
gstreamer1-plugins-base (Red Hat package) - update to 1.22.1-2.el9
gstreamer1-plugins-base - update to 1.22.1-2.0.1
gstreamer1-plugins-base-devel - update to 1.22.1-2.0.1
mingw-gstreamer1-plugins-good - update to 1.22.7-1.fc38
mingw-gstreamer1-plugins-base - update to 1.22.7-1.fc38
mingw-gstreamer1-plugins-bad-free - update to 1.22.7-1.fc38
mingw-gstreamer1 - update to 1.22.7-1.fc38
Red Hat OpenShift Container Platform - update to 4.13.45
Red Hat Migration Toolkit for Applications - update to 6.2.3

• https://gstreamer.freedesktop.org/security/sa-2023-0003.html
• https://www.zerodayinitiative.com/advisories/ZDI-23-901/

• Multiple vulnerabilities in GStreamer
• Debian update for gst-plugins-bad1.0
• Ubuntu update for gst-plugins-base1.0
• SUSE update for gstreamer-plugins-base
• SUSE update for gstreamer-plugins-base
• SUSE update for gstreamer-plugins-base
• SUSE update for gstreamer-plugins-base
• SUSE update for gstreamer-plugins-base
• SUSE update for gstreamer-plugins-base
• Fedora 38 update for mingw-gstreamer1, mingw-gstreamer1-plugins-bad-free, mingw-gstreamer1-plugins-base, mingw-gstreamer1-plugins-good
• openEuler 22.03 LTS SP3 update for gstreamer1-plugins-base
• openEuler 20.03 LTS SP4 update for gstreamer1-plugins-base
• openEuler 22.03 LTS update for gstreamer1-plugins-base
• openEuler 22.03 LTS SP1 update for gstreamer1-plugins-base
• openEuler 22.03 LTS SP2 update for gstreamer1-plugins-base
• openEuler 20.03 LTS SP1 update for gstreamer1-plugins-base
• Red Hat Enterprise Linux 9 update for gstreamer1-plugins-base
• Multiple vulnerabilities in OpenShift API for Data Protection (OADP) 1.3
• Multiple vulnerabilities in Red Hat Migration Toolkit for Applications 6.2
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.13
• Anolis OS update for gstreamer1-plugins-base
• Ubuntu update for gst-plugins-base1.0