GStreamer is a library for constructing graphs of media-handling components. An out-of-bounds write vulnerability was identified in the convert_to_s334_1a function in isomp4/qtdemux.c. The vulnerability arises due to a discrepancy between the size of memory allocated to the storage array and the loop condition i * 2 < ccpair_size. Specifically, when ccpair_size is even, the allocated size in storage does not match the loop's expected bounds, resulting in an out-of-bounds write. This bug allows for the overwriting of up to 3 bytes beyond the allocated bounds of the storage array. This vulnerability is fixed in 1.24.10.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:11148 advisory.

    GStreamer is a streaming media framework based on graphs of filters which operate on media data. The     gstreamer1-plugins-good packages contain a collection of well-supported plug-ins of good quality and under     the LGPL license.

    Security Fix(es):

    * gstreamer1-plugins-good: uninitialized stack memory in Matroska/WebM demuxer (CVE-2024-47540)

    * gstreamer1-plugins-good: OOB-write in isomp4/qtdemux.c (CVE-2024-47537)

    * gstreamer1-plugins-good: OOB-write in convert_to_s334_1a (CVE-2024-47539)

    * gstreamer1-plugins-good: null pointer dereference in gst_gdk_pixbuf_dec_flush (CVE-2024-47613)

    * gstreamer1-plugins-good: integer overflows in MP4/MOV demuxer and memory allocator that can lead to out-     of-bounds writes (CVE-2024-47606)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:11149 advisory.

    GStreamer is a streaming media framework based on graphs of filters which operate on media data. The     gstreamer1-plugins-good packages contain a collection of well-supported plug-ins of good quality and under     the LGPL license.

    Security Fix(es):

    * gstreamer1-plugins-good: uninitialized stack memory in Matroska/WebM demuxer (CVE-2024-47540)

    * gstreamer1-plugins-good: OOB-write in isomp4/qtdemux.c (CVE-2024-47537)

    * gstreamer1-plugins-good: OOB-write in convert_to_s334_1a (CVE-2024-47539)

    * gstreamer1-plugins-good: null pointer dereference in gst_gdk_pixbuf_dec_flush (CVE-2024-47613)

    * gstreamer1-plugins-good: integer overflows in MP4/MOV demuxer and memory allocator that can lead to out-     of-bounds writes (CVE-2024-47606)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:11299 advisory.

    GStreamer is a streaming media framework based on graphs of filters which operate on media data. The     gstreamer1-plugins-good packages contain a collection of well-supported plug-ins of good quality and under     the LGPL license.

    Security Fix(es):

    * gstreamer1-plugins-good: uninitialized stack memory in Matroska/WebM demuxer (CVE-2024-47540)

    * gstreamer1-plugins-good: OOB-write in isomp4/qtdemux.c (CVE-2024-47537)

    * gstreamer1-plugins-good: OOB-write in convert_to_s334_1a (CVE-2024-47539)

    * gstreamer1-plugins-good: null pointer dereference in gst_gdk_pixbuf_dec_flush (CVE-2024-47613)

    * gstreamer1-plugins-good: integer overflows in MP4/MOV demuxer and memory allocator that can lead to out-     of-bounds writes (CVE-2024-47606)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:11298 advisory.

    GStreamer is a streaming media framework based on graphs of filters which operate on media data. The     gstreamer1-plugins-good packages contain a collection of well-supported plug-ins of good quality and under     the LGPL license.

    Security Fix(es):

    * gstreamer1-plugins-good: uninitialized stack memory in Matroska/WebM demuxer (CVE-2024-47540)

    * gstreamer1-plugins-good: OOB-write in isomp4/qtdemux.c (CVE-2024-47537)

    * gstreamer1-plugins-good: OOB-write in convert_to_s334_1a (CVE-2024-47539)

    * gstreamer1-plugins-good: null pointer dereference in gst_gdk_pixbuf_dec_flush (CVE-2024-47613)

    * gstreamer1-plugins-good: integer overflows in MP4/MOV demuxer and memory allocator that can lead to out-     of-bounds writes (CVE-2024-47606)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-11299 advisory.

    [1.16.1-5]
    - CVE-2024-47537, CVE-2024-47539, CVE-2024-47540, CVE-2024-47606,       CVE-2024-47613       Resolves: RHEL-70949, RHEL-70962, RHEL-70936, RHEL-71022       Resolves: RHEL-70998

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:11122 advisory.

    GStreamer is a streaming media framework based on graphs of filters which operate on media data. The     gstreamer1-plugins-good packages contain a collection of well-supported plug-ins of good quality and under     the LGPL license.

    Security Fix(es):

    * gstreamer1-plugins-good: uninitialized stack memory in Matroska/WebM demuxer (CVE-2024-47540)

    * gstreamer1-plugins-good: OOB-write in isomp4/qtdemux.c (CVE-2024-47537)

    * gstreamer1-plugins-good: OOB-write in convert_to_s334_1a (CVE-2024-47539)

    * gstreamer1-plugins-good: null pointer dereference in gst_gdk_pixbuf_dec_flush (CVE-2024-47613)

    * gstreamer1-plugins-good: integer overflows in MP4/MOV demuxer and memory allocator that can lead to out-     of-bounds writes (CVE-2024-47606)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:11121 advisory.

    GStreamer is a streaming media framework based on graphs of filters which operate on media data. The     gstreamer1-plugins-good packages contain a collection of well-supported plug-ins of good quality and under     the LGPL license.

    Security Fix(es):

    * gstreamer1-plugins-good: uninitialized stack memory in Matroska/WebM demuxer (CVE-2024-47540)

    * gstreamer1-plugins-good: OOB-write in isomp4/qtdemux.c (CVE-2024-47537)

    * gstreamer1-plugins-good: OOB-write in convert_to_s334_1a (CVE-2024-47539)

    * gstreamer1-plugins-good: null pointer dereference in gst_gdk_pixbuf_dec_flush (CVE-2024-47613)

    * gstreamer1-plugins-good: integer overflows in MP4/MOV demuxer and memory allocator that can lead to out-     of-bounds writes (CVE-2024-47606)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:11119 advisory.

    GStreamer is a streaming media framework based on graphs of filters which operate on media data. The     gstreamer1-plugins-good packages contain a collection of well-supported plug-ins of good quality and under     the LGPL license.

    Security Fix(es):

    * gstreamer1-plugins-good: uninitialized stack memory in Matroska/WebM demuxer (CVE-2024-47540)

    * gstreamer1-plugins-good: OOB-write in isomp4/qtdemux.c (CVE-2024-47537)

    * gstreamer1-plugins-good: OOB-write in convert_to_s334_1a (CVE-2024-47539)

    * gstreamer1-plugins-good: null pointer dereference in gst_gdk_pixbuf_dec_flush (CVE-2024-47613)

    * gstreamer1-plugins-good: integer overflows in MP4/MOV demuxer and memory allocator that can lead to out-     of-bounds writes (CVE-2024-47606)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-11122 advisory.

    [1.22.1-3]
    - CVE-2024-47537, CVE-2024-47539, CVE-2024-47540, CVE-2024-47606,       CVE-2024-47613       Resolves: RHEL-70954, RHEL-70967, RHEL-70941, RHEL-71027,       Resolves: RHEL-71003

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 750ab972-b3e8-11ef-b680-4ccc6adda413 advisory.

    The GStreamer Security Center reports:
    20 security bugs.

Tenable has extracted the preceding description block directly from the FreeBSD security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
213160	RHEL 8 : gstreamer1-plugins-good (RHSA-2024:11148)	Nessus	Red Hat Local Security Checks	high
213159	RHEL 8 : gstreamer1-plugins-good (RHSA-2024:11149)	Nessus	Red Hat Local Security Checks	high
213146	RHEL 8 : gstreamer1-plugins-good (RHSA-2024:11299)	Nessus	Red Hat Local Security Checks	high
213144	RHEL 9 : gstreamer1-plugins-good (RHSA-2024:11298)	Nessus	Red Hat Local Security Checks	high
213135	Oracle Linux 8 : gstreamer1-plugins-good (ELSA-2024-11299)	Nessus	Oracle Linux Local Security Checks	high
213115	RHEL 9 : gstreamer1-plugins-good (RHSA-2024:11122)	Nessus	Red Hat Local Security Checks	high
213113	RHEL 9 : gstreamer1-plugins-good (RHSA-2024:11121)	Nessus	Red Hat Local Security Checks	high
213103	RHEL 9 : gstreamer1-plugins-good (RHSA-2024:11119)	Nessus	Red Hat Local Security Checks	high
213055	Oracle Linux 9 : gstreamer1-plugins-good (ELSA-2024-11122)	Nessus	Oracle Linux Local Security Checks	high
212149	FreeBSD : gstreamer1-plugins-good -- multiple vulnerabilities (750ab972-b3e8-11ef-b680-4ccc6adda413)	Nessus	FreeBSD Local Security Checks	critical

Detections

Analytics

CVE-2024-47539

high

Tenable Plugins

high

high

high

high

high

high

high

high

high

critical