Integer overflow in gstreamer - CVE-2024-4453

Vulnerability identifier: #VU89735

CSH Severity: High

CVSS v4: 8.4 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2024-4453

CWE-ID: CWE-190

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to integer overflow within the parsing of EXIF metadata. A remote attacker can pass specially crafted data to the application, trigger integer overflow and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

gstreamer
Debian Linux
Oracle Solaris
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise High Performance Computing LTSS 15
SUSE Linux Enterprise High Performance Computing ESPOS 15
SUSE Linux Enterprise Desktop 15
SUSE Linux Enterprise Real Time 15
SUSE Manager Server
SUSE Manager Retail Branch Server
SUSE Manager Proxy
openSUSE Leap Micro
SUSE Linux Enterprise Micro
SUSE Linux Enterprise Micro for Rancher
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for ARM 64
Anolis OS
SUSE Linux Enterprise Server 15 SP4 LTSS
SUSE Linux Enterprise Desktop 15 SP4 LTSS
SUSE Package Hub 15
Basesystem Module
openSUSE Leap
Ubuntu
Fedora
gst-plugins-base1.0 (Ubuntu package)
gstreamer1-plugins-base (Red Hat package)
gstreamer1.0-plugins-base (Ubuntu package)
gst-plugins-base1.0 (Debian package)
libgstaudio-1_0-0-64bit
libgstfft-1_0-0-32bit-debuginfo
libgstgl-1_0-0-64bit
libgstsdp-1_0-0-64bit
libgstaudio-1_0-0-64bit-debuginfo
libgsttag-1_0-0-32bit
libgstgl-1_0-0-32bit
libgstrtsp-1_0-0-32bit-debuginfo
libgstfft-1_0-0-32bit
libgstrtp-1_0-0-32bit
libgstsdp-1_0-0-32bit-debuginfo
libgstriff-1_0-0-32bit-debuginfo
libgstaudio-1_0-0-32bit
gstreamer-plugins-base-32bit
gstreamer-plugins-base-32bit-debuginfo
libgstrtsp-1_0-0-32bit
libgsttag-1_0-0-32bit-debuginfo
libgstpbutils-1_0-0-32bit-debuginfo
libgstvideo-1_0-0-32bit-debuginfo
libgstriff-1_0-0-32bit
gstreamer-plugins-base-devel-32bit
libgstapp-1_0-0-32bit
libgstaudio-1_0-0-32bit-debuginfo
libgstriff-1_0-0-debuginfo
libgstfft-1_0-0-64bit-debuginfo
libgstrtp-1_0-0
libgstfft-1_0-0-64bit
gstreamer-plugins-base-64bit-debuginfo
libgstapp-1_0-0-64bit-debuginfo
libgstapp-1_0-0-64bit
libgstriff-1_0-0-64bit
libgstpbutils-1_0-0-64bit
libgstrtp-1_0-0-64bit-debuginfo
libgstsdp-1_0-0-64bit-debuginfo
libgstpbutils-1_0-0-64bit-debuginfo
libgsttag-1_0-0-64bit-debuginfo
libgstallocators-1_0-0-64bit-debuginfo
libgsttag-1_0-0-64bit
gstreamer-plugins-base-64bit
libgstriff-1_0-0-64bit-debuginfo
libgstgl-1_0-0-64bit-debuginfo
libgstrtsp-1_0-0-64bit-debuginfo
libgstallocators-1_0-0-64bit
libgstrtsp-1_0-0-64bit
libgstvideo-1_0-0-64bit-debuginfo
libgstvideo-1_0-0-64bit
libgstrtp-1_0-0-64bit
gstreamer-plugins-base-devel-64bit
libgstrtsp-1_0-0-debuginfo
libgstsdp-1_0-0-debuginfo
libgstapp-1_0-0-debuginfo
typelib-1_0-GstGL-1_0
typelib-1_0-GstAudio-1_0
libgstallocators-1_0-0-debuginfo
libgstpbutils-1_0-0
libgsttag-1_0-0-debuginfo
typelib-1_0-GstSdp-1_0
typelib-1_0-GstGLEGL-1_0
libgstallocators-1_0-0
libgsttag-1_0-0
libgstallocators-1_0-0-32bit-debuginfo
typelib-1_0-GstRtsp-1_0
typelib-1_0-GstTag-1_0
gstreamer-plugins-base-debuginfo
typelib-1_0-GstRtp-1_0
libgstpbutils-1_0-0-debuginfo
libgstaudio-1_0-0-debuginfo
typelib-1_0-GstGLX11-1_0
libgstapp-1_0-0
typelib-1_0-GstApp-1_0
gstreamer-plugins-base-devel
typelib-1_0-GstAllocators-1_0
libgstgl-1_0-0-debuginfo
libgstgl-1_0-0-32bit-debuginfo
libgstpbutils-1_0-0-32bit
libgstallocators-1_0-0-32bit
libgstrtp-1_0-0-32bit-debuginfo
libgstapp-1_0-0-32bit-debuginfo
libgstvideo-1_0-0-32bit
libgstsdp-1_0-0-32bit
gstreamer-plugins-base-lang
libgstfft-1_0-0-debuginfo
libgstrtsp-1_0-0
libgstvideo-1_0-0-debuginfo
libgstriff-1_0-0
libgstaudio-1_0-0
libgstsdp-1_0-0
libgstgl-1_0-0
gstreamer-plugins-base-debugsource
typelib-1_0-GstPbutils-1_0
libgstrtp-1_0-0-debuginfo
gstreamer-plugins-base
libgstvideo-1_0-0
typelib-1_0-GstVideo-1_0
typelib-1_0-GstGLWayland-1_0
libgstfft-1_0-0
mingw-gstreamer1-plugins-good
mingw-gstreamer1-plugins-bad-free
mingw-gstreamer1
mingw-gstreamer1-plugins-base
gstreamer1-devel
gstreamer1
gstreamer1-plugins-bad-free-devel
gstreamer1-plugins-bad-free-libs
gstreamer1-plugins-bad-free
gstreamer1-plugins-base-doc
gstreamer1-plugins-base-tools
gstreamer1-plugins-base-devel
gstreamer1-plugins-base
gstreamer1-plugins-bad-free-doc

Install updates from vendor's website.

Oracle Solaris - update to 11.4 SRU 71
gst-plugins-base1.0 (Ubuntu package) - addressed in versions 1.8.3-1ubuntu0.3+esm2, 1.14.5-0ubuntu1~18.04.3+esm1
gstreamer1-plugins-base (Red Hat package) - update to 1.16.1-4.el8_10
gstreamer1.0-plugins-base (Ubuntu package) - addressed in versions 1.16.3-0ubuntu1.3, 1.20.1-1ubuntu0.2, 1.22.6-1ubuntu0.1, 1.24.2-1ubuntu0.1
gst-plugins-base1.0 (Debian package) - addressed in versions 1.18.4-2+deb11u2, 1.22.0-3+deb12u2
libgstaudio-1_0-0-64bit - addressed in versions 1.20.1-150400.3.8.2, 1.24.0-150600.3.3.1
libgstfft-1_0-0-32bit-debuginfo - addressed in versions 1.20.1-150400.3.8.2, 1.24.0-150600.3.3.1
libgstgl-1_0-0-64bit - addressed in versions 1.20.1-150400.3.8.2, 1.24.0-150600.3.3.1
libgstsdp-1_0-0-64bit - addressed in versions 1.20.1-150400.3.8.2, 1.24.0-150600.3.3.1
libgstaudio-1_0-0-64bit-debuginfo - addressed in versions 1.20.1-150400.3.8.2, 1.24.0-150600.3.3.1
libgsttag-1_0-0-32bit - addressed in versions 1.20.1-150400.3.8.2, 1.24.0-150600.3.3.1
libgstgl-1_0-0-32bit - addressed in versions 1.20.1-150400.3.8.2, 1.24.0-150600.3.3.1
libgstrtsp-1_0-0-32bit-debuginfo - addressed in versions 1.20.1-150400.3.8.2, 1.24.0-150600.3.3.1
libgstfft-1_0-0-32bit - addressed in versions 1.20.1-150400.3.8.2, 1.24.0-150600.3.3.1
libgstrtp-1_0-0-32bit - addressed in versions 1.20.1-150400.3.8.2, 1.24.0-150600.3.3.1
libgstsdp-1_0-0-32bit-debuginfo - addressed in versions 1.20.1-150400.3.8.2, 1.24.0-150600.3.3.1
libgstriff-1_0-0-32bit-debuginfo - addressed in versions 1.20.1-150400.3.8.2, 1.24.0-150600.3.3.1
libgstaudio-1_0-0-32bit - addressed in versions 1.20.1-150400.3.8.2, 1.24.0-150600.3.3.1
gstreamer-plugins-base-32bit - addressed in versions 1.20.1-150400.3.8.2, 1.24.0-150600.3.3.1
gstreamer-plugins-base-32bit-debuginfo - addressed in versions 1.20.1-150400.3.8.2, 1.24.0-150600.3.3.1
libgstrtsp-1_0-0-32bit - addressed in versions 1.20.1-150400.3.8.2, 1.24.0-150600.3.3.1
libgsttag-1_0-0-32bit-debuginfo - addressed in versions 1.20.1-150400.3.8.2, 1.24.0-150600.3.3.1
libgstpbutils-1_0-0-32bit-debuginfo - addressed in versions 1.20.1-150400.3.8.2, 1.24.0-150600.3.3.1
libgstvideo-1_0-0-32bit-debuginfo - addressed in versions 1.20.1-150400.3.8.2, 1.24.0-150600.3.3.1
libgstriff-1_0-0-32bit - addressed in versions 1.20.1-150400.3.8.2, 1.24.0-150600.3.3.1
gstreamer-plugins-base-devel-32bit - addressed in versions 1.20.1-150400.3.8.2, 1.24.0-150600.3.3.1
libgstapp-1_0-0-32bit - addressed in versions 1.20.1-150400.3.8.2, 1.24.0-150600.3.3.1
libgstaudio-1_0-0-32bit-debuginfo - addressed in versions 1.20.1-150400.3.8.2, 1.24.0-150600.3.3.1
libgstriff-1_0-0-debuginfo - addressed in versions 1.20.1-150400.3.8.2, 1.24.0-150600.3.3.1
libgstfft-1_0-0-64bit-debuginfo - addressed in versions 1.20.1-150400.3.8.2, 1.24.0-150600.3.3.1
libgstrtp-1_0-0 - addressed in versions 1.20.1-150400.3.8.2, 1.24.0-150600.3.3.1
libgstfft-1_0-0-64bit - addressed in versions 1.20.1-150400.3.8.2, 1.24.0-150600.3.3.1
gstreamer-plugins-base-64bit-debuginfo - addressed in versions 1.20.1-150400.3.8.2, 1.24.0-150600.3.3.1
libgstapp-1_0-0-64bit-debuginfo - addressed in versions 1.20.1-150400.3.8.2, 1.24.0-150600.3.3.1
libgstapp-1_0-0-64bit - addressed in versions 1.20.1-150400.3.8.2, 1.24.0-150600.3.3.1
libgstriff-1_0-0-64bit - addressed in versions 1.20.1-150400.3.8.2, 1.24.0-150600.3.3.1
libgstpbutils-1_0-0-64bit - addressed in versions 1.20.1-150400.3.8.2, 1.24.0-150600.3.3.1
libgstrtp-1_0-0-64bit-debuginfo - addressed in versions 1.20.1-150400.3.8.2, 1.24.0-150600.3.3.1
libgstsdp-1_0-0-64bit-debuginfo - addressed in versions 1.20.1-150400.3.8.2, 1.24.0-150600.3.3.1
libgstpbutils-1_0-0-64bit-debuginfo - addressed in versions 1.20.1-150400.3.8.2, 1.24.0-150600.3.3.1
libgsttag-1_0-0-64bit-debuginfo - addressed in versions 1.20.1-150400.3.8.2, 1.24.0-150600.3.3.1
libgstallocators-1_0-0-64bit-debuginfo - addressed in versions 1.20.1-150400.3.8.2, 1.24.0-150600.3.3.1
libgsttag-1_0-0-64bit - addressed in versions 1.20.1-150400.3.8.2, 1.24.0-150600.3.3.1
gstreamer-plugins-base-64bit - addressed in versions 1.20.1-150400.3.8.2, 1.24.0-150600.3.3.1
libgstriff-1_0-0-64bit-debuginfo - addressed in versions 1.20.1-150400.3.8.2, 1.24.0-150600.3.3.1
libgstgl-1_0-0-64bit-debuginfo - addressed in versions 1.20.1-150400.3.8.2, 1.24.0-150600.3.3.1
libgstrtsp-1_0-0-64bit-debuginfo - addressed in versions 1.20.1-150400.3.8.2, 1.24.0-150600.3.3.1
libgstallocators-1_0-0-64bit - addressed in versions 1.20.1-150400.3.8.2, 1.24.0-150600.3.3.1
libgstrtsp-1_0-0-64bit - addressed in versions 1.20.1-150400.3.8.2, 1.24.0-150600.3.3.1
libgstvideo-1_0-0-64bit-debuginfo - addressed in versions 1.20.1-150400.3.8.2, 1.24.0-150600.3.3.1
libgstvideo-1_0-0-64bit - addressed in versions 1.20.1-150400.3.8.2, 1.24.0-150600.3.3.1
libgstrtp-1_0-0-64bit - addressed in versions 1.20.1-150400.3.8.2, 1.24.0-150600.3.3.1
gstreamer-plugins-base-devel-64bit - addressed in versions 1.20.1-150400.3.8.2, 1.24.0-150600.3.3.1
libgstrtsp-1_0-0-debuginfo - addressed in versions 1.20.1-150400.3.8.2, 1.24.0-150600.3.3.1
libgstsdp-1_0-0-debuginfo - addressed in versions 1.20.1-150400.3.8.2, 1.24.0-150600.3.3.1
libgstapp-1_0-0-debuginfo - addressed in versions 1.20.1-150400.3.8.2, 1.24.0-150600.3.3.1
typelib-1_0-GstGL-1_0 - addressed in versions 1.20.1-150400.3.8.2, 1.24.0-150600.3.3.1
typelib-1_0-GstAudio-1_0 - addressed in versions 1.20.1-150400.3.8.2, 1.24.0-150600.3.3.1
libgstallocators-1_0-0-debuginfo - addressed in versions 1.20.1-150400.3.8.2, 1.24.0-150600.3.3.1
libgstpbutils-1_0-0 - addressed in versions 1.20.1-150400.3.8.2, 1.24.0-150600.3.3.1
libgsttag-1_0-0-debuginfo - addressed in versions 1.20.1-150400.3.8.2, 1.24.0-150600.3.3.1
typelib-1_0-GstSdp-1_0 - addressed in versions 1.20.1-150400.3.8.2, 1.24.0-150600.3.3.1
typelib-1_0-GstGLEGL-1_0 - addressed in versions 1.20.1-150400.3.8.2, 1.24.0-150600.3.3.1
libgstallocators-1_0-0 - addressed in versions 1.20.1-150400.3.8.2, 1.24.0-150600.3.3.1
libgsttag-1_0-0 - addressed in versions 1.20.1-150400.3.8.2, 1.24.0-150600.3.3.1
libgstallocators-1_0-0-32bit-debuginfo - addressed in versions 1.20.1-150400.3.8.2, 1.24.0-150600.3.3.1
typelib-1_0-GstRtsp-1_0 - addressed in versions 1.20.1-150400.3.8.2, 1.24.0-150600.3.3.1
typelib-1_0-GstTag-1_0 - addressed in versions 1.20.1-150400.3.8.2, 1.24.0-150600.3.3.1
gstreamer-plugins-base-debuginfo - addressed in versions 1.20.1-150400.3.8.2, 1.24.0-150600.3.3.1
typelib-1_0-GstRtp-1_0 - addressed in versions 1.20.1-150400.3.8.2, 1.24.0-150600.3.3.1
libgstpbutils-1_0-0-debuginfo - addressed in versions 1.20.1-150400.3.8.2, 1.24.0-150600.3.3.1
libgstaudio-1_0-0-debuginfo - addressed in versions 1.20.1-150400.3.8.2, 1.24.0-150600.3.3.1
typelib-1_0-GstGLX11-1_0 - addressed in versions 1.20.1-150400.3.8.2, 1.24.0-150600.3.3.1
libgstapp-1_0-0 - addressed in versions 1.20.1-150400.3.8.2, 1.24.0-150600.3.3.1
typelib-1_0-GstApp-1_0 - addressed in versions 1.20.1-150400.3.8.2, 1.24.0-150600.3.3.1
gstreamer-plugins-base-devel - addressed in versions 1.20.1-150400.3.8.2, 1.24.0-150600.3.3.1
typelib-1_0-GstAllocators-1_0 - addressed in versions 1.20.1-150400.3.8.2, 1.24.0-150600.3.3.1
libgstgl-1_0-0-debuginfo - addressed in versions 1.20.1-150400.3.8.2, 1.24.0-150600.3.3.1
libgstgl-1_0-0-32bit-debuginfo - addressed in versions 1.20.1-150400.3.8.2, 1.24.0-150600.3.3.1
libgstpbutils-1_0-0-32bit - addressed in versions 1.20.1-150400.3.8.2, 1.24.0-150600.3.3.1
libgstallocators-1_0-0-32bit - addressed in versions 1.20.1-150400.3.8.2, 1.24.0-150600.3.3.1
libgstrtp-1_0-0-32bit-debuginfo - addressed in versions 1.20.1-150400.3.8.2, 1.24.0-150600.3.3.1
libgstapp-1_0-0-32bit-debuginfo - addressed in versions 1.20.1-150400.3.8.2, 1.24.0-150600.3.3.1
libgstvideo-1_0-0-32bit - addressed in versions 1.20.1-150400.3.8.2, 1.24.0-150600.3.3.1
libgstsdp-1_0-0-32bit - addressed in versions 1.20.1-150400.3.8.2, 1.24.0-150600.3.3.1
gstreamer-plugins-base-lang - addressed in versions 1.20.1-150400.3.8.2, 1.24.0-150600.3.3.1
libgstfft-1_0-0-debuginfo - addressed in versions 1.20.1-150400.3.8.2, 1.24.0-150600.3.3.1
libgstrtsp-1_0-0 - addressed in versions 1.20.1-150400.3.8.2, 1.24.0-150600.3.3.1
libgstvideo-1_0-0-debuginfo - addressed in versions 1.20.1-150400.3.8.2, 1.24.0-150600.3.3.1
libgstriff-1_0-0 - addressed in versions 1.20.1-150400.3.8.2, 1.24.0-150600.3.3.1
libgstaudio-1_0-0 - addressed in versions 1.20.1-150400.3.8.2, 1.24.0-150600.3.3.1
libgstsdp-1_0-0 - addressed in versions 1.20.1-150400.3.8.2, 1.24.0-150600.3.3.1
libgstgl-1_0-0 - addressed in versions 1.20.1-150400.3.8.2, 1.24.0-150600.3.3.1
gstreamer-plugins-base-debugsource - addressed in versions 1.20.1-150400.3.8.2, 1.24.0-150600.3.3.1
typelib-1_0-GstPbutils-1_0 - addressed in versions 1.20.1-150400.3.8.2, 1.24.0-150600.3.3.1
libgstrtp-1_0-0-debuginfo - addressed in versions 1.20.1-150400.3.8.2, 1.24.0-150600.3.3.1
gstreamer-plugins-base - addressed in versions 1.20.1-150400.3.8.2, 1.24.0-150600.3.3.1
libgstvideo-1_0-0 - addressed in versions 1.20.1-150400.3.8.2, 1.24.0-150600.3.3.1
typelib-1_0-GstVideo-1_0 - addressed in versions 1.20.1-150400.3.8.2, 1.24.0-150600.3.3.1
typelib-1_0-GstGLWayland-1_0 - addressed in versions 1.20.1-150400.3.8.2, 1.24.0-150600.3.3.1
libgstfft-1_0-0 - addressed in versions 1.20.1-150400.3.8.2, 1.24.0-150600.3.3.1
mingw-gstreamer1-plugins-good - update to 1.22.9-1.fc39
mingw-gstreamer1-plugins-bad-free - update to 1.22.9-1.fc39
mingw-gstreamer1 - update to 1.22.9-1.fc39
mingw-gstreamer1-plugins-base - update to 1.22.9-2.fc39
gstreamer1-devel - update to 1.22.12-3.0.1
gstreamer1 - update to 1.22.12-3.0.1
gstreamer1-plugins-bad-free-devel - addressed in versions 1.22.12-3.0.1, 1.26.4-1
gstreamer1-plugins-bad-free-libs - addressed in versions 1.22.12-3.0.1, 1.26.4-1
gstreamer1-plugins-bad-free - addressed in versions 1.22.12-3.0.1, 1.26.4-1
gstreamer1-plugins-base-doc - update to 1.24.10-2
gstreamer1-plugins-base-tools - update to 1.24.10-2
gstreamer1-plugins-base-devel - update to 1.24.10-2
gstreamer1-plugins-base - update to 1.24.10-2
gstreamer1-plugins-bad-free-doc - update to 1.26.4-1

• https://www.zerodayinitiative.com/advisories/ZDI-24-467/

• Integer overflow in GStreamer
• Ubuntu update for gst-plugins-base1.0
• SUSE update for gstreamer-plugins-base
• SUSE update for gstreamer-plugins-base
• Fedora 39 update for mingw-gstreamer1, mingw-gstreamer1-plugins-bad-free, mingw-gstreamer1-plugins-base, mingw-gstreamer1-plugins-good
• Debian update for gst-plugins-base1.0
• Oracle Solaris update for thrid-party components
• Red Hat Enterprise Linux 8 update for gstreamer1-plugins-base
• Anolis OS update for gstreamer1-plugins-base
• Anolis OS update for gstreamer1
• Anolis OS update for gstreamer1-plugins-bad-free
• Ubuntu update for gst-plugins-base1.0
• Anolis OS update for gstreamer1-plugins-bad-free