Use-after-free in gst-plugins-bad - CVE-2023-44446

Vulnerability identifier: #VU83223

CSH Severity: High

CVSS v4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2023-44446

CWE-ID: CWE-416

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to compromise vulnerable system.

The vulnerability exists due to a use-after-free error when parsing MXF video files. A remote attacker can trick the victim to open a specially crafted file, trigger a use-after-free error and execute arbitrary code on the system.

Successful exploitation of the vulnerability may allow an attacker to compromise vulnerable system.

gst-plugins-bad
Debian Linux
Gentoo Linux
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise High Performance Computing LTSS 15
SUSE Linux Enterprise High Performance Computing ESPOS 15
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise Desktop 15
SUSE Linux Enterprise Server for SAP Applications 12
SUSE Linux Enterprise Software Development Kit 12
SUSE Linux Enterprise High Performance Computing 12
SUSE Linux Enterprise Server 12
SUSE Manager Proxy
SUSE Manager Retail Branch Server
SUSE Manager Server
SUSE Linux Enterprise Micro
Anolis OS
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for Scientific Computing
Red Hat Enterprise Linux for Power, big endian
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux Server
CentOS
SUSE Enterprise Storage
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for ARM 64
Red Hat CodeReady Linux Builder for x86_64
Red Hat CodeReady Linux Builder for Power, little endian
Red Hat CodeReady Linux Builder for ARM 64
Red Hat CodeReady Linux Builder for IBM z Systems
Red Hat Enterprise Linux Server - AUS
Red Hat Enterprise Linux Server - TUS
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Enterprise Linux for x86_64 - Extended Update Support
Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support
Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support
SUSE Linux Enterprise Server 15 SP2 LTSS
SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS
SUSE Linux Enterprise Server 15 SP3 LTSS
SUSE Package Hub 15
SUSE Linux Enterprise Server 15 SP4 LTSS
Basesystem Module
Desktop Applications Module
SUSE Linux Enterprise Desktop 15 SP4 LTSS
openSUSE Leap
Ubuntu
openEuler
Fedora
Red Hat OpenShift Container Platform
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
gstreamer-plugins-bad-free-devel-docs
gstreamer-plugins-bad-free-devel
gstreamer-plugins-bad-free
gstreamer-plugins-bad-free (Red Hat package)
gst-plugins-bad1.0 (Ubuntu package)
libgstbadaudio-1_0-0
libgstinsertbin-1_0-0-debuginfo
libgstbasecamerabinsrc-1_0-0-debuginfo
gstreamer-plugins-bad
libgstbadvideo-1_0-0-debuginfo
libgstadaptivedemux-1_0-0-debuginfo
libgstmpegts-1_0-0-debuginfo
gstreamer-plugins-bad-debuginfo
libgstinsertbin-1_0-0
libgsturidownloader-1_0-0
gstreamer-plugins-bad-debugsource
libgsturidownloader-1_0-0-debuginfo
gstreamer-plugins-bad-devel
gstreamer-plugins-bad-lang
libgstphotography-1_0-0-debuginfo
libgstadaptivedemux-1_0-0
libgstbadvideo-1_0-0
libgstbadbase-1_0-0-debuginfo
libgstcodecparsers-1_0-0-debuginfo
libgstphotography-1_0-0
libgstgl-1_0-0-debuginfo
libgstcodecparsers-1_0-0
libgstbadbase-1_0-0
libgstbadaudio-1_0-0-debuginfo
libgstgl-1_0-0
libgstmpegts-1_0-0
libgstbasecamerabinsrc-1_0-0
gstreamer1-plugins-bad-free-gtk
gstreamer1-plugins-bad-free-devel
gstreamer1-plugins-bad-free
gstreamer1-plugins-bad-free (Red Hat package)
gstreamer1-plugins-bad-free-debugsource
gstreamer1-plugins-bad-free-debuginfo
libgstreamer-plugins-bad1.0-0 (Ubuntu package)
gstreamer1.0-plugins-bad (Ubuntu package)
libgstisoff-1_0-0
typelib-1_0-GstMpegts-1_0
gstreamer-plugins-bad-chromaprint-debuginfo
typelib-1_0-GstInsertBin-1_0
libgstplayer-1_0-0-debuginfo
libgstwebrtc-1_0-0
libgstplayer-1_0-0
libgstsctp-1_0-0-debuginfo
typelib-1_0-GstWebRTC-1_0
libgstwayland-1_0-0-debuginfo
libgstwayland-1_0-0
libgstwebrtc-1_0-0-debuginfo
gstreamer-plugins-bad-chromaprint
libgstsctp-1_0-0
typelib-1_0-GstPlayer-1_0
libgstisoff-1_0-0-debuginfo
libgstsctp-1_0-0-32bit-debuginfo
gstreamer-plugins-bad-doc
libgstplayer-1_0-0-32bit
gstreamer-plugins-bad-32bit-debuginfo
libgstwayland-1_0-0-32bit-debuginfo
gstreamer-plugins-bad-chromaprint-32bit-debuginfo
libgstadaptivedemux-1_0-0-32bit-debuginfo
libgstisoff-1_0-0-32bit-debuginfo
libgstwebrtc-1_0-0-32bit
libgstinsertbin-1_0-0-32bit-debuginfo
libgstmpegts-1_0-0-32bit-debuginfo
libgstsctp-1_0-0-32bit
libgstbasecamerabinsrc-1_0-0-32bit-debuginfo
libgstphotography-1_0-0-32bit-debuginfo
libgstcodecparsers-1_0-0-32bit-debuginfo
libgstphotography-1_0-0-32bit
libgstinsertbin-1_0-0-32bit
gstreamer-plugins-bad-32bit
libgstwebrtc-1_0-0-32bit-debuginfo
libgstcodecparsers-1_0-0-64bit
libgstplayer-1_0-0-64bit-debuginfo
libgstadaptivedemux-1_0-0-64bit
libgstinsertbin-1_0-0-64bit
libgstinsertbin-1_0-0-64bit-debuginfo
libgstisoff-1_0-0-64bit-debuginfo
gstreamer-plugins-bad-chromaprint-64bit-debuginfo
libgstwayland-1_0-0-64bit-debuginfo
libgstwebrtc-1_0-0-64bit
libgstmpegts-1_0-0-64bit-debuginfo
libgstbasecamerabinsrc-1_0-0-64bit
libgstcodecparsers-1_0-0-32bit
gstreamer-plugins-bad-64bit
libgstbasecamerabinsrc-1_0-0-64bit-debuginfo
libgstmpegts-1_0-0-64bit
libgstisoff-1_0-0-64bit
libgstphotography-1_0-0-64bit-debuginfo
libgstcodecparsers-1_0-0-64bit-debuginfo
libgsturidownloader-1_0-0-64bit-debuginfo
libgstphotography-1_0-0-64bit
libgstsctp-1_0-0-64bit-debuginfo
libgstsctp-1_0-0-64bit
libgstplayer-1_0-0-64bit
libgstbadaudio-1_0-0-32bit-debuginfo
libgstadaptivedemux-1_0-0-32bit
libgstbasecamerabinsrc-1_0-0-32bit
libgstisoff-1_0-0-32bit
libgstwayland-1_0-0-32bit
gstreamer-plugins-bad-chromaprint-32bit
libgstbadaudio-1_0-0-32bit
libgsturidownloader-1_0-0-32bit
libgstmpegts-1_0-0-32bit
libgstplayer-1_0-0-32bit-debuginfo
libgstadaptivedemux-1_0-0-64bit-debuginfo
libgsturidownloader-1_0-0-64bit
libgstbadaudio-1_0-0-64bit
libgstwebrtc-1_0-0-64bit-debuginfo
gstreamer-plugins-bad-chromaprint-64bit
libgstbadaudio-1_0-0-64bit-debuginfo
gstreamer-plugins-bad-64bit-debuginfo
libgstwayland-1_0-0-64bit
libgsturidownloader-1_0-0-32bit-debuginfo
gst-plugins-bad1.0 (Debian package)
libgstcodecs-1_0-0-32bit
libgstplay-1_0-0-32bit
libgstva-1_0-0-64bit-debuginfo
libgstva-1_0-0-32bit
libgstvulkan-1_0-0-32bit-debuginfo
libgstva-1_0-0-32bit-debuginfo
libgstvulkan-1_0-0-64bit
libgstcodecs-1_0-0-64bit
libgstcodecs-1_0-0-64bit-debuginfo
libgstplay-1_0-0-64bit-debuginfo
libgstvulkan-1_0-0-64bit-debuginfo
libgstva-1_0-0-64bit
libgstplay-1_0-0-64bit
libgstva-1_0-0
libgstplay-1_0-0
libgsttranscoder-1_0-0-debuginfo
typelib-1_0-GstVulkanXCB-1_0
typelib-1_0-GstBadAudio-1_0
typelib-1_0-GstCodecs-1_0
libgstcodecs-1_0-0-debuginfo
gstreamer-transcoder-devel
typelib-1_0-GstPlay-1_0
gstreamer-transcoder
libgstcodecs-1_0-0-32bit-debuginfo
libgstplay-1_0-0-32bit-debuginfo
libgstvulkan-1_0-0-32bit
libgstva-1_0-0-debuginfo
libgstvulkan-1_0-0-debuginfo
typelib-1_0-GstVulkanWayland-1_0
libgstvulkan-1_0-0
libgsttranscoder-1_0-0
typelib-1_0-GstVulkan-1_0
libgstcodecs-1_0-0
gstreamer-transcoder-debuginfo
libgstplay-1_0-0-debuginfo
typelib-1_0-GstTranscoder-1_0
typelib-1_0-CudaGst-1_0
libgstcuda-1_0-0
libgstcuda-1_0-0-debuginfo
typelib-1_0-GstCuda-1_0
libgstwebrtcnice-1_0-0-debuginfo
libgstwebrtcnice-1_0-0
typelib-1_0-GstVa-1_0
libgstwebrtcnice-1_0-0-64bit
libgstcuda-1_0-0-64bit
libgstwebrtcnice-1_0-0-64bit-debuginfo
libgstcuda-1_0-0-64bit-debuginfo
libgstwebrtcnice-1_0-0-32bit-debuginfo
libgstcuda-1_0-0-32bit-debuginfo
libgstcuda-1_0-0-32bit
libgstwebrtcnice-1_0-0-32bit
gstreamer1-plugins-bad-free-doc
gstreamer1-plugins-base
gstreamer1-plugins-good
gstreamer1-plugins-ugly-free
gstreamer1-rtsp-server
gstreamer1-vaapi
gstreamer1-plugin-libav
media-libs/gstreamer
media-libs/gst-plugins-bad

Install updates from vendor's website.

gst-plugins-bad - update to 1.22.7
Red Hat OpenShift Container Platform - addressed in versions 4.11.56, 4.12.47, 4.14.8
gstreamer-plugins-bad-free-devel-docs - update to 0.10.23-24
gstreamer-plugins-bad-free-devel - update to 0.10.23-24
gstreamer-plugins-bad-free - update to 0.10.23-24
gstreamer-plugins-bad-free (Red Hat package) - update to 0.10.23-24.el7_9
gst-plugins-bad1.0 (Ubuntu package) - addressed in versions 1.8.3-1ubuntu0.2+esm1, 1.14.5-0ubuntu1~18.04.1+esm1
libgstbadaudio-1_0-0 - addressed in versions 1.8.3-18.15.1, 1.16.3-150200.4.19.1, 1.16.3-150300.9.15.1, 1.16.3-150300.9.18.1, 1.20.1-150400.3.15.1, 1.22.0-150500.3.17.1
libgstinsertbin-1_0-0-debuginfo - addressed in versions 1.8.3-18.15.1, 1.16.3-150200.4.19.1, 1.16.3-150300.9.15.1, 1.16.3-150300.9.18.1, 1.20.1-150400.3.15.1, 1.22.0-150500.3.17.1
libgstbasecamerabinsrc-1_0-0-debuginfo - addressed in versions 1.8.3-18.15.1, 1.16.3-150200.4.19.1, 1.16.3-150300.9.15.1, 1.16.3-150300.9.18.1, 1.20.1-150400.3.15.1, 1.22.0-150500.3.17.1
gstreamer-plugins-bad - addressed in versions 1.8.3-18.15.1, 1.16.3-150200.4.19.1, 1.16.3-150300.9.15.1, 1.16.3-150300.9.18.1, 1.20.1-150400.3.15.1, 1.22.0-150500.3.17.1
libgstbadvideo-1_0-0-debuginfo - update to 1.8.3-18.15.1
libgstadaptivedemux-1_0-0-debuginfo - addressed in versions 1.8.3-18.15.1, 1.16.3-150200.4.19.1, 1.16.3-150300.9.15.1, 1.16.3-150300.9.18.1, 1.20.1-150400.3.15.1, 1.22.0-150500.3.17.1
libgstmpegts-1_0-0-debuginfo - addressed in versions 1.8.3-18.15.1, 1.16.3-150200.4.19.1, 1.16.3-150300.9.15.1, 1.16.3-150300.9.18.1, 1.20.1-150400.3.15.1, 1.22.0-150500.3.17.1
gstreamer-plugins-bad-debuginfo - addressed in versions 1.8.3-18.15.1, 1.16.3-150200.4.19.1, 1.16.3-150300.9.15.1, 1.16.3-150300.9.18.1, 1.20.1-150400.3.15.1, 1.22.0-150500.3.17.1
libgstinsertbin-1_0-0 - addressed in versions 1.8.3-18.15.1, 1.16.3-150200.4.19.1, 1.16.3-150300.9.15.1, 1.16.3-150300.9.18.1, 1.20.1-150400.3.15.1, 1.22.0-150500.3.17.1
libgsturidownloader-1_0-0 - addressed in versions 1.8.3-18.15.1, 1.16.3-150200.4.19.1, 1.16.3-150300.9.15.1, 1.16.3-150300.9.18.1, 1.20.1-150400.3.15.1, 1.22.0-150500.3.17.1
gstreamer-plugins-bad-debugsource - addressed in versions 1.8.3-18.15.1, 1.16.3-150200.4.19.1, 1.16.3-150300.9.15.1, 1.16.3-150300.9.18.1, 1.20.1-150400.3.15.1, 1.22.0-150500.3.17.1
libgsturidownloader-1_0-0-debuginfo - addressed in versions 1.8.3-18.15.1, 1.16.3-150200.4.19.1, 1.16.3-150300.9.15.1, 1.16.3-150300.9.18.1, 1.20.1-150400.3.15.1, 1.22.0-150500.3.17.1
gstreamer-plugins-bad-devel - addressed in versions 1.8.3-18.15.1, 1.16.3-150200.4.19.1, 1.16.3-150300.9.15.1, 1.16.3-150300.9.18.1, 1.20.1-150400.3.15.1, 1.22.0-150500.3.17.1
gstreamer-plugins-bad-lang - addressed in versions 1.8.3-18.15.1, 1.16.3-150200.4.19.1, 1.16.3-150300.9.15.1, 1.16.3-150300.9.18.1, 1.20.1-150400.3.15.1, 1.22.0-150500.3.17.1
libgstphotography-1_0-0-debuginfo - addressed in versions 1.8.3-18.15.1, 1.16.3-150200.4.19.1, 1.16.3-150300.9.15.1, 1.16.3-150300.9.18.1, 1.20.1-150400.3.15.1, 1.22.0-150500.3.17.1
libgstadaptivedemux-1_0-0 - addressed in versions 1.8.3-18.15.1, 1.16.3-150200.4.19.1, 1.16.3-150300.9.15.1, 1.16.3-150300.9.18.1, 1.20.1-150400.3.15.1, 1.22.0-150500.3.17.1
libgstbadvideo-1_0-0 - update to 1.8.3-18.15.1
libgstbadbase-1_0-0-debuginfo - update to 1.8.3-18.15.1
libgstcodecparsers-1_0-0-debuginfo - addressed in versions 1.8.3-18.15.1, 1.16.3-150200.4.19.1, 1.16.3-150300.9.15.1, 1.16.3-150300.9.18.1, 1.20.1-150400.3.15.1, 1.22.0-150500.3.17.1
libgstphotography-1_0-0 - addressed in versions 1.8.3-18.15.1, 1.16.3-150200.4.19.1, 1.16.3-150300.9.15.1, 1.16.3-150300.9.18.1, 1.20.1-150400.3.15.1, 1.22.0-150500.3.17.1
libgstgl-1_0-0-debuginfo - update to 1.8.3-18.15.1
libgstcodecparsers-1_0-0 - addressed in versions 1.8.3-18.15.1, 1.16.3-150200.4.19.1, 1.16.3-150300.9.15.1, 1.16.3-150300.9.18.1, 1.20.1-150400.3.15.1, 1.22.0-150500.3.17.1
libgstbadbase-1_0-0 - update to 1.8.3-18.15.1
libgstbadaudio-1_0-0-debuginfo - addressed in versions 1.8.3-18.15.1, 1.16.3-150200.4.19.1, 1.16.3-150300.9.15.1, 1.16.3-150300.9.18.1, 1.20.1-150400.3.15.1, 1.22.0-150500.3.17.1
libgstgl-1_0-0 - update to 1.8.3-18.15.1
libgstmpegts-1_0-0 - addressed in versions 1.8.3-18.15.1, 1.16.3-150200.4.19.1, 1.16.3-150300.9.15.1, 1.16.3-150300.9.18.1, 1.20.1-150400.3.15.1, 1.22.0-150500.3.17.1
libgstbasecamerabinsrc-1_0-0 - addressed in versions 1.8.3-18.15.1, 1.16.3-150200.4.19.1, 1.16.3-150300.9.15.1, 1.16.3-150300.9.18.1, 1.20.1-150400.3.15.1, 1.22.0-150500.3.17.1
gstreamer1-plugins-bad-free-gtk - update to 1.10.4-4
gstreamer1-plugins-bad-free-devel - addressed in versions 1.10.4-4, 1.18.4-7.0.1, 1.22.1-2.0.1, 1.22.6-2
gstreamer1-plugins-bad-free - addressed in versions 1.10.4-4, 1.18.4-7.0.1, 1.22.1-2.0.1, 1.22.6-2
gstreamer1-plugins-bad-free (Red Hat package) - addressed in versions 1.10.4-4.el7_9, 1.16.1-2.el8_2, 1.16.1-2.el8_4, 1.16.1-2.el8_6, 1.16.1-2.el8_8, 1.16.1-2.el8_9, 1.18.4-6.el9_0, 1.18.4-7.el9_2, 1.22.1-2.el9_3
gstreamer1-plugins-bad-free-debugsource - update to 1.16.2-4
gstreamer1-plugins-bad-free - update to 1.16.2-4
gstreamer1-plugins-bad-free-devel - update to 1.16.2-4
gstreamer1-plugins-bad-free-debuginfo - update to 1.16.2-4
libgstreamer-plugins-bad1.0-0 (Ubuntu package) - addressed in versions 1.16.3-0ubuntu1.1, 1.20.3-0ubuntu1.1, 1.22.1-1ubuntu1.1, 1.22.4-1ubuntu1.1
gstreamer1.0-plugins-bad (Ubuntu package) - addressed in versions 1.16.3-0ubuntu1.1, 1.20.3-0ubuntu1.1, 1.22.1-1ubuntu1.1, 1.22.4-1ubuntu1.1
libgstisoff-1_0-0 - addressed in versions 1.16.3-150200.4.19.1, 1.16.3-150300.9.15.1, 1.16.3-150300.9.18.1, 1.20.1-150400.3.15.1, 1.22.0-150500.3.17.1
typelib-1_0-GstMpegts-1_0 - addressed in versions 1.16.3-150200.4.19.1, 1.16.3-150300.9.15.1, 1.16.3-150300.9.18.1, 1.20.1-150400.3.15.1, 1.22.0-150500.3.17.1
gstreamer-plugins-bad-chromaprint-debuginfo - addressed in versions 1.16.3-150200.4.19.1, 1.16.3-150300.9.15.1, 1.16.3-150300.9.18.1, 1.20.1-150400.3.15.1, 1.22.0-150500.3.17.1
typelib-1_0-GstInsertBin-1_0 - addressed in versions 1.16.3-150200.4.19.1, 1.16.3-150300.9.15.1, 1.16.3-150300.9.18.1, 1.20.1-150400.3.15.1, 1.22.0-150500.3.17.1
libgstplayer-1_0-0-debuginfo - addressed in versions 1.16.3-150200.4.19.1, 1.16.3-150300.9.15.1, 1.16.3-150300.9.18.1, 1.20.1-150400.3.15.1, 1.22.0-150500.3.17.1
libgstwebrtc-1_0-0 - addressed in versions 1.16.3-150200.4.19.1, 1.16.3-150300.9.15.1, 1.16.3-150300.9.18.1, 1.20.1-150400.3.15.1, 1.22.0-150500.3.17.1
libgstplayer-1_0-0 - addressed in versions 1.16.3-150200.4.19.1, 1.16.3-150300.9.15.1, 1.16.3-150300.9.18.1, 1.20.1-150400.3.15.1, 1.22.0-150500.3.17.1
libgstsctp-1_0-0-debuginfo - addressed in versions 1.16.3-150200.4.19.1, 1.16.3-150300.9.15.1, 1.16.3-150300.9.18.1, 1.20.1-150400.3.15.1, 1.22.0-150500.3.17.1
typelib-1_0-GstWebRTC-1_0 - addressed in versions 1.16.3-150200.4.19.1, 1.16.3-150300.9.15.1, 1.16.3-150300.9.18.1, 1.20.1-150400.3.15.1, 1.22.0-150500.3.17.1
libgstwayland-1_0-0-debuginfo - addressed in versions 1.16.3-150200.4.19.1, 1.16.3-150300.9.15.1, 1.16.3-150300.9.18.1, 1.20.1-150400.3.15.1, 1.22.0-150500.3.17.1
libgstwayland-1_0-0 - addressed in versions 1.16.3-150200.4.19.1, 1.16.3-150300.9.15.1, 1.16.3-150300.9.18.1, 1.20.1-150400.3.15.1, 1.22.0-150500.3.17.1
libgstwebrtc-1_0-0-debuginfo - addressed in versions 1.16.3-150200.4.19.1, 1.16.3-150300.9.15.1, 1.16.3-150300.9.18.1, 1.20.1-150400.3.15.1, 1.22.0-150500.3.17.1
gstreamer-plugins-bad-chromaprint - addressed in versions 1.16.3-150200.4.19.1, 1.16.3-150300.9.15.1, 1.16.3-150300.9.18.1, 1.20.1-150400.3.15.1, 1.22.0-150500.3.17.1
libgstsctp-1_0-0 - addressed in versions 1.16.3-150200.4.19.1, 1.16.3-150300.9.15.1, 1.16.3-150300.9.18.1, 1.20.1-150400.3.15.1, 1.22.0-150500.3.17.1
typelib-1_0-GstPlayer-1_0 - addressed in versions 1.16.3-150200.4.19.1, 1.16.3-150300.9.15.1, 1.16.3-150300.9.18.1, 1.20.1-150400.3.15.1, 1.22.0-150500.3.17.1
libgstisoff-1_0-0-debuginfo - addressed in versions 1.16.3-150200.4.19.1, 1.16.3-150300.9.15.1, 1.16.3-150300.9.18.1, 1.20.1-150400.3.15.1, 1.22.0-150500.3.17.1
libgstsctp-1_0-0-32bit-debuginfo - addressed in versions 1.16.3-150300.9.15.1, 1.16.3-150300.9.18.1, 1.20.1-150400.3.15.1, 1.22.0-150500.3.17.1
gstreamer-plugins-bad-doc - addressed in versions 1.16.3-150300.9.15.1, 1.16.3-150300.9.18.1
libgstplayer-1_0-0-32bit - addressed in versions 1.16.3-150300.9.15.1, 1.16.3-150300.9.18.1, 1.20.1-150400.3.15.1, 1.22.0-150500.3.17.1
gstreamer-plugins-bad-32bit-debuginfo - addressed in versions 1.16.3-150300.9.15.1, 1.16.3-150300.9.18.1, 1.20.1-150400.3.15.1, 1.22.0-150500.3.17.1
libgstwayland-1_0-0-32bit-debuginfo - addressed in versions 1.16.3-150300.9.15.1, 1.16.3-150300.9.18.1, 1.20.1-150400.3.15.1, 1.22.0-150500.3.17.1
gstreamer-plugins-bad-chromaprint-32bit-debuginfo - addressed in versions 1.16.3-150300.9.15.1, 1.16.3-150300.9.18.1, 1.20.1-150400.3.15.1, 1.22.0-150500.3.17.1
libgstadaptivedemux-1_0-0-32bit-debuginfo - addressed in versions 1.16.3-150300.9.15.1, 1.16.3-150300.9.18.1, 1.20.1-150400.3.15.1, 1.22.0-150500.3.17.1
libgstisoff-1_0-0-32bit-debuginfo - addressed in versions 1.16.3-150300.9.15.1, 1.16.3-150300.9.18.1, 1.20.1-150400.3.15.1, 1.22.0-150500.3.17.1
libgstwebrtc-1_0-0-32bit - addressed in versions 1.16.3-150300.9.15.1, 1.16.3-150300.9.18.1, 1.20.1-150400.3.15.1, 1.22.0-150500.3.17.1
libgstinsertbin-1_0-0-32bit-debuginfo - addressed in versions 1.16.3-150300.9.15.1, 1.16.3-150300.9.18.1, 1.20.1-150400.3.15.1, 1.22.0-150500.3.17.1
libgstmpegts-1_0-0-32bit-debuginfo - addressed in versions 1.16.3-150300.9.15.1, 1.16.3-150300.9.18.1, 1.20.1-150400.3.15.1, 1.22.0-150500.3.17.1
libgstsctp-1_0-0-32bit - addressed in versions 1.16.3-150300.9.15.1, 1.16.3-150300.9.18.1, 1.20.1-150400.3.15.1, 1.22.0-150500.3.17.1
libgstbasecamerabinsrc-1_0-0-32bit-debuginfo - addressed in versions 1.16.3-150300.9.15.1, 1.16.3-150300.9.18.1, 1.20.1-150400.3.15.1, 1.22.0-150500.3.17.1
libgstphotography-1_0-0-32bit-debuginfo - addressed in versions 1.16.3-150300.9.15.1, 1.16.3-150300.9.18.1, 1.20.1-150400.3.15.1, 1.22.0-150500.3.17.1
libgstcodecparsers-1_0-0-32bit-debuginfo - addressed in versions 1.16.3-150300.9.15.1, 1.16.3-150300.9.18.1, 1.20.1-150400.3.15.1, 1.22.0-150500.3.17.1
libgstphotography-1_0-0-32bit - addressed in versions 1.16.3-150300.9.15.1, 1.16.3-150300.9.18.1, 1.20.1-150400.3.15.1, 1.22.0-150500.3.17.1
libgstinsertbin-1_0-0-32bit - addressed in versions 1.16.3-150300.9.15.1, 1.16.3-150300.9.18.1, 1.20.1-150400.3.15.1, 1.22.0-150500.3.17.1
gstreamer-plugins-bad-32bit - addressed in versions 1.16.3-150300.9.15.1, 1.16.3-150300.9.18.1, 1.20.1-150400.3.15.1, 1.22.0-150500.3.17.1
libgstwebrtc-1_0-0-32bit-debuginfo - addressed in versions 1.16.3-150300.9.15.1, 1.16.3-150300.9.18.1, 1.20.1-150400.3.15.1, 1.22.0-150500.3.17.1
libgstcodecparsers-1_0-0-64bit - addressed in versions 1.16.3-150300.9.15.1, 1.16.3-150300.9.18.1, 1.20.1-150400.3.15.1, 1.22.0-150500.3.17.1
libgstplayer-1_0-0-64bit-debuginfo - addressed in versions 1.16.3-150300.9.15.1, 1.16.3-150300.9.18.1, 1.20.1-150400.3.15.1, 1.22.0-150500.3.17.1
libgstadaptivedemux-1_0-0-64bit - addressed in versions 1.16.3-150300.9.15.1, 1.16.3-150300.9.18.1, 1.20.1-150400.3.15.1, 1.22.0-150500.3.17.1
libgstinsertbin-1_0-0-64bit - addressed in versions 1.16.3-150300.9.15.1, 1.16.3-150300.9.18.1, 1.20.1-150400.3.15.1, 1.22.0-150500.3.17.1
libgstinsertbin-1_0-0-64bit-debuginfo - addressed in versions 1.16.3-150300.9.15.1, 1.16.3-150300.9.18.1, 1.20.1-150400.3.15.1, 1.22.0-150500.3.17.1
libgstisoff-1_0-0-64bit-debuginfo - addressed in versions 1.16.3-150300.9.15.1, 1.16.3-150300.9.18.1, 1.20.1-150400.3.15.1, 1.22.0-150500.3.17.1
gstreamer-plugins-bad-chromaprint-64bit-debuginfo - addressed in versions 1.16.3-150300.9.15.1, 1.16.3-150300.9.18.1, 1.20.1-150400.3.15.1, 1.22.0-150500.3.17.1
libgstwayland-1_0-0-64bit-debuginfo - addressed in versions 1.16.3-150300.9.15.1, 1.16.3-150300.9.18.1, 1.20.1-150400.3.15.1, 1.22.0-150500.3.17.1
libgstwebrtc-1_0-0-64bit - addressed in versions 1.16.3-150300.9.15.1, 1.16.3-150300.9.18.1, 1.20.1-150400.3.15.1, 1.22.0-150500.3.17.1
libgstmpegts-1_0-0-64bit-debuginfo - addressed in versions 1.16.3-150300.9.15.1, 1.16.3-150300.9.18.1, 1.20.1-150400.3.15.1, 1.22.0-150500.3.17.1
libgstbasecamerabinsrc-1_0-0-64bit - addressed in versions 1.16.3-150300.9.15.1, 1.16.3-150300.9.18.1, 1.20.1-150400.3.15.1, 1.22.0-150500.3.17.1
libgstcodecparsers-1_0-0-32bit - addressed in versions 1.16.3-150300.9.15.1, 1.16.3-150300.9.18.1, 1.20.1-150400.3.15.1, 1.22.0-150500.3.17.1
gstreamer-plugins-bad-64bit - addressed in versions 1.16.3-150300.9.15.1, 1.16.3-150300.9.18.1, 1.20.1-150400.3.15.1, 1.22.0-150500.3.17.1
libgstbasecamerabinsrc-1_0-0-64bit-debuginfo - addressed in versions 1.16.3-150300.9.15.1, 1.16.3-150300.9.18.1, 1.20.1-150400.3.15.1, 1.22.0-150500.3.17.1
libgstmpegts-1_0-0-64bit - addressed in versions 1.16.3-150300.9.15.1, 1.16.3-150300.9.18.1, 1.20.1-150400.3.15.1, 1.22.0-150500.3.17.1
libgstisoff-1_0-0-64bit - addressed in versions 1.16.3-150300.9.15.1, 1.16.3-150300.9.18.1, 1.20.1-150400.3.15.1, 1.22.0-150500.3.17.1
libgstphotography-1_0-0-64bit-debuginfo - addressed in versions 1.16.3-150300.9.15.1, 1.16.3-150300.9.18.1, 1.20.1-150400.3.15.1, 1.22.0-150500.3.17.1
libgstcodecparsers-1_0-0-64bit-debuginfo - addressed in versions 1.16.3-150300.9.15.1, 1.16.3-150300.9.18.1, 1.20.1-150400.3.15.1, 1.22.0-150500.3.17.1
libgsturidownloader-1_0-0-64bit-debuginfo - addressed in versions 1.16.3-150300.9.15.1, 1.16.3-150300.9.18.1, 1.20.1-150400.3.15.1, 1.22.0-150500.3.17.1
libgstphotography-1_0-0-64bit - addressed in versions 1.16.3-150300.9.15.1, 1.16.3-150300.9.18.1, 1.20.1-150400.3.15.1, 1.22.0-150500.3.17.1
libgstsctp-1_0-0-64bit-debuginfo - addressed in versions 1.16.3-150300.9.15.1, 1.16.3-150300.9.18.1, 1.20.1-150400.3.15.1, 1.22.0-150500.3.17.1
libgstsctp-1_0-0-64bit - addressed in versions 1.16.3-150300.9.15.1, 1.16.3-150300.9.18.1, 1.20.1-150400.3.15.1, 1.22.0-150500.3.17.1
libgstplayer-1_0-0-64bit - addressed in versions 1.16.3-150300.9.15.1, 1.16.3-150300.9.18.1, 1.20.1-150400.3.15.1, 1.22.0-150500.3.17.1
libgstbadaudio-1_0-0-32bit-debuginfo - addressed in versions 1.16.3-150300.9.15.1, 1.16.3-150300.9.18.1, 1.20.1-150400.3.15.1, 1.22.0-150500.3.17.1
libgstadaptivedemux-1_0-0-32bit - addressed in versions 1.16.3-150300.9.15.1, 1.16.3-150300.9.18.1, 1.20.1-150400.3.15.1, 1.22.0-150500.3.17.1
libgstbasecamerabinsrc-1_0-0-32bit - addressed in versions 1.16.3-150300.9.15.1, 1.16.3-150300.9.18.1, 1.20.1-150400.3.15.1, 1.22.0-150500.3.17.1
libgstisoff-1_0-0-32bit - addressed in versions 1.16.3-150300.9.15.1, 1.16.3-150300.9.18.1, 1.20.1-150400.3.15.1, 1.22.0-150500.3.17.1
libgstwayland-1_0-0-32bit - addressed in versions 1.16.3-150300.9.15.1, 1.16.3-150300.9.18.1, 1.20.1-150400.3.15.1, 1.22.0-150500.3.17.1
gstreamer-plugins-bad-chromaprint-32bit - addressed in versions 1.16.3-150300.9.15.1, 1.16.3-150300.9.18.1, 1.20.1-150400.3.15.1, 1.22.0-150500.3.17.1
libgstbadaudio-1_0-0-32bit - addressed in versions 1.16.3-150300.9.15.1, 1.16.3-150300.9.18.1, 1.20.1-150400.3.15.1, 1.22.0-150500.3.17.1
libgsturidownloader-1_0-0-32bit - addressed in versions 1.16.3-150300.9.15.1, 1.16.3-150300.9.18.1, 1.20.1-150400.3.15.1, 1.22.0-150500.3.17.1
libgstmpegts-1_0-0-32bit - addressed in versions 1.16.3-150300.9.15.1, 1.16.3-150300.9.18.1, 1.20.1-150400.3.15.1, 1.22.0-150500.3.17.1
libgstplayer-1_0-0-32bit-debuginfo - addressed in versions 1.16.3-150300.9.15.1, 1.16.3-150300.9.18.1, 1.20.1-150400.3.15.1, 1.22.0-150500.3.17.1
libgstadaptivedemux-1_0-0-64bit-debuginfo - addressed in versions 1.16.3-150300.9.15.1, 1.16.3-150300.9.18.1, 1.20.1-150400.3.15.1, 1.22.0-150500.3.17.1
libgsturidownloader-1_0-0-64bit - addressed in versions 1.16.3-150300.9.15.1, 1.16.3-150300.9.18.1, 1.20.1-150400.3.15.1, 1.22.0-150500.3.17.1
libgstbadaudio-1_0-0-64bit - addressed in versions 1.16.3-150300.9.15.1, 1.16.3-150300.9.18.1, 1.20.1-150400.3.15.1, 1.22.0-150500.3.17.1
libgstwebrtc-1_0-0-64bit-debuginfo - addressed in versions 1.16.3-150300.9.15.1, 1.16.3-150300.9.18.1, 1.20.1-150400.3.15.1, 1.22.0-150500.3.17.1
gstreamer-plugins-bad-chromaprint-64bit - addressed in versions 1.16.3-150300.9.15.1, 1.16.3-150300.9.18.1, 1.20.1-150400.3.15.1, 1.22.0-150500.3.17.1
libgstbadaudio-1_0-0-64bit-debuginfo - addressed in versions 1.16.3-150300.9.15.1, 1.16.3-150300.9.18.1, 1.20.1-150400.3.15.1, 1.22.0-150500.3.17.1
gstreamer-plugins-bad-64bit-debuginfo - addressed in versions 1.16.3-150300.9.15.1, 1.16.3-150300.9.18.1, 1.20.1-150400.3.15.1, 1.22.0-150500.3.17.1
libgstwayland-1_0-0-64bit - addressed in versions 1.16.3-150300.9.15.1, 1.16.3-150300.9.18.1, 1.20.1-150400.3.15.1, 1.22.0-150500.3.17.1
libgsturidownloader-1_0-0-32bit-debuginfo - addressed in versions 1.16.3-150300.9.15.1, 1.16.3-150300.9.18.1, 1.20.1-150400.3.15.1, 1.22.0-150500.3.17.1
gst-plugins-bad1.0 (Debian package) - addressed in versions 1.18.4-3+deb11u3, 1.22.0-4+deb12u3
libgstcodecs-1_0-0-32bit - addressed in versions 1.20.1-150400.3.15.1, 1.22.0-150500.3.17.1
libgstplay-1_0-0-32bit - addressed in versions 1.20.1-150400.3.15.1, 1.22.0-150500.3.17.1
libgstva-1_0-0-64bit-debuginfo - addressed in versions 1.20.1-150400.3.15.1, 1.22.0-150500.3.17.1
libgstva-1_0-0-32bit - addressed in versions 1.20.1-150400.3.15.1, 1.22.0-150500.3.17.1
libgstvulkan-1_0-0-32bit-debuginfo - addressed in versions 1.20.1-150400.3.15.1, 1.22.0-150500.3.17.1
libgstva-1_0-0-32bit-debuginfo - addressed in versions 1.20.1-150400.3.15.1, 1.22.0-150500.3.17.1
libgstvulkan-1_0-0-64bit - addressed in versions 1.20.1-150400.3.15.1, 1.22.0-150500.3.17.1
libgstcodecs-1_0-0-64bit - addressed in versions 1.20.1-150400.3.15.1, 1.22.0-150500.3.17.1
libgstcodecs-1_0-0-64bit-debuginfo - addressed in versions 1.20.1-150400.3.15.1, 1.22.0-150500.3.17.1
libgstplay-1_0-0-64bit-debuginfo - addressed in versions 1.20.1-150400.3.15.1, 1.22.0-150500.3.17.1
libgstvulkan-1_0-0-64bit-debuginfo - addressed in versions 1.20.1-150400.3.15.1, 1.22.0-150500.3.17.1
libgstva-1_0-0-64bit - addressed in versions 1.20.1-150400.3.15.1, 1.22.0-150500.3.17.1
libgstplay-1_0-0-64bit - addressed in versions 1.20.1-150400.3.15.1, 1.22.0-150500.3.17.1
libgstva-1_0-0 - addressed in versions 1.20.1-150400.3.15.1, 1.22.0-150500.3.17.1
libgstplay-1_0-0 - addressed in versions 1.20.1-150400.3.15.1, 1.22.0-150500.3.17.1
libgsttranscoder-1_0-0-debuginfo - addressed in versions 1.20.1-150400.3.15.1, 1.22.0-150500.3.17.1
typelib-1_0-GstVulkanXCB-1_0 - addressed in versions 1.20.1-150400.3.15.1, 1.22.0-150500.3.17.1
typelib-1_0-GstBadAudio-1_0 - addressed in versions 1.20.1-150400.3.15.1, 1.22.0-150500.3.17.1
typelib-1_0-GstCodecs-1_0 - addressed in versions 1.20.1-150400.3.15.1, 1.22.0-150500.3.17.1
libgstcodecs-1_0-0-debuginfo - addressed in versions 1.20.1-150400.3.15.1, 1.22.0-150500.3.17.1
gstreamer-transcoder-devel - addressed in versions 1.20.1-150400.3.15.1, 1.22.0-150500.3.17.1
typelib-1_0-GstPlay-1_0 - addressed in versions 1.20.1-150400.3.15.1, 1.22.0-150500.3.17.1
gstreamer-transcoder - addressed in versions 1.20.1-150400.3.15.1, 1.22.0-150500.3.17.1
libgstcodecs-1_0-0-32bit-debuginfo - addressed in versions 1.20.1-150400.3.15.1, 1.22.0-150500.3.17.1
libgstplay-1_0-0-32bit-debuginfo - addressed in versions 1.20.1-150400.3.15.1, 1.22.0-150500.3.17.1
libgstvulkan-1_0-0-32bit - addressed in versions 1.20.1-150400.3.15.1, 1.22.0-150500.3.17.1
libgstva-1_0-0-debuginfo - addressed in versions 1.20.1-150400.3.15.1, 1.22.0-150500.3.17.1
libgstvulkan-1_0-0-debuginfo - addressed in versions 1.20.1-150400.3.15.1, 1.22.0-150500.3.17.1
typelib-1_0-GstVulkanWayland-1_0 - addressed in versions 1.20.1-150400.3.15.1, 1.22.0-150500.3.17.1
libgstvulkan-1_0-0 - addressed in versions 1.20.1-150400.3.15.1, 1.22.0-150500.3.17.1
libgsttranscoder-1_0-0 - addressed in versions 1.20.1-150400.3.15.1, 1.22.0-150500.3.17.1
typelib-1_0-GstVulkan-1_0 - addressed in versions 1.20.1-150400.3.15.1, 1.22.0-150500.3.17.1
libgstcodecs-1_0-0 - addressed in versions 1.20.1-150400.3.15.1, 1.22.0-150500.3.17.1
gstreamer-transcoder-debuginfo - addressed in versions 1.20.1-150400.3.15.1, 1.22.0-150500.3.17.1
libgstplay-1_0-0-debuginfo - addressed in versions 1.20.1-150400.3.15.1, 1.22.0-150500.3.17.1
typelib-1_0-GstTranscoder-1_0 - addressed in versions 1.20.1-150400.3.15.1, 1.22.0-150500.3.17.1
typelib-1_0-CudaGst-1_0 - update to 1.22.0-150500.3.17.1
libgstcuda-1_0-0 - update to 1.22.0-150500.3.17.1
libgstcuda-1_0-0-debuginfo - update to 1.22.0-150500.3.17.1
typelib-1_0-GstCuda-1_0 - update to 1.22.0-150500.3.17.1
libgstwebrtcnice-1_0-0-debuginfo - update to 1.22.0-150500.3.17.1
libgstwebrtcnice-1_0-0 - update to 1.22.0-150500.3.17.1
typelib-1_0-GstVa-1_0 - update to 1.22.0-150500.3.17.1
libgstwebrtcnice-1_0-0-64bit - update to 1.22.0-150500.3.17.1
libgstcuda-1_0-0-64bit - update to 1.22.0-150500.3.17.1
libgstwebrtcnice-1_0-0-64bit-debuginfo - update to 1.22.0-150500.3.17.1
libgstcuda-1_0-0-64bit-debuginfo - update to 1.22.0-150500.3.17.1
libgstwebrtcnice-1_0-0-32bit-debuginfo - update to 1.22.0-150500.3.17.1
libgstcuda-1_0-0-32bit-debuginfo - update to 1.22.0-150500.3.17.1
libgstcuda-1_0-0-32bit - update to 1.22.0-150500.3.17.1
libgstwebrtcnice-1_0-0-32bit - update to 1.22.0-150500.3.17.1
gstreamer1-plugins-bad-free-doc - update to 1.22.6-2
gstreamer1-plugins-base - update to 1.22.7-1.fc39
gstreamer1-plugins-good - update to 1.22.7-1.fc39
gstreamer1-plugins-bad-free - update to 1.22.7-1.fc39
gstreamer1-plugins-ugly-free - update to 1.22.7-1.fc39
gstreamer1-rtsp-server - update to 1.22.7-1.fc39
gstreamer1-vaapi - update to 1.22.7-1.fc39
gstreamer1-plugin-libav - update to 1.22.7-1.fc39
media-libs/gstreamer - update to 1.22.11
media-libs/gst-plugins-bad - update to 1.22.11-r1

• https://www.zerodayinitiative.com/advisories/ZDI-23-1647/
• https://gstreamer.freedesktop.org/security/sa-2023-0010.html

• Multiple vulnerabilities in GStreamer gst-plugins-bad
• Fedora 39 update for gstreamer1-plugin-libav, gstreamer1-plugins-bad-free, gstreamer1-plugins-base, gstreamer1-plugins-good, gstreamer1-plugins-ugly-free, gstreamer1-rtsp-server, gstreamer1-vaapi
• Debian update for gst-plugins-bad1.0
• Ubuntu update for gst-plugins-bad1.0
• Red Hat Enterprise Linux 9 update for gstreamer1-plugins-bad-free
• Red Hat Enterprise Linux 9.2 Extended Update Support update for gstreamer1-plugins-bad-free
• Red Hat Enterprise Linux 8.8 Extended Update Support update for gstreamer1-plugins-bad-free
• Red Hat Enterprise Linux 8 update for gstreamer1-plugins-bad-free
• Red Hat Enterprise Linux 8.6 Extended Update Support update for gstreamer1-plugins-bad-free
• Red Hat Enterprise Linux 8 update for gstreamer1-plugins-bad-free
• Red Hat Enterprise Linux 8 update for gstreamer1-plugins-bad-free
• Red Hat Enterprise Linux 9.0 Extended Update Support update for gstreamer1-plugins-bad-free
• SUSE update for gstreamer-plugins-bad
• SUSE update for gstreamer-plugins-bad
• SUSE update for gstreamer-plugins-bad
• Red Hat Enterprise Linux 7 update for gstreamer1-plugins-bad-free
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.14
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.11
• Red Hat Enterprise Linux 7 update for gstreamer-plugins-bad-free
• Red Hat OpenShift Container Platform 4.12 update for golang
• CentOS 7 update for gstreamer-plugins-bad-free
• CentOS 7 update for gstreamer1-plugins-bad-free
• SUSE update for gstreamer-plugins-bad
• SUSE update for gstreamer-plugins-bad
• SUSE update for gstreamer-plugins-bad
• openEuler update for gstreamer1-plugins-bad-free
• Gentoo update for GStreamer, GStreamer Plugins
• Anolis OS update for gstreamer1-plugins-bad-free
• Anolis OS update for gstreamer1-plugins-bad-free
• Anolis OS update for gstreamer1-plugins-bad-free
• Anolis OS update for gstreamer-plugins-bad-free
• Anolis OS update for gstreamer1-plugins-bad-free
• Ubuntu update for gst-plugins-bad1.0