GStreamer is a library for constructing graphs of media-handling components. An uninitialized stack variable vulnerability has been identified in the gst_matroska_demux_add_wvpk_header function within matroska-demux.c. When size < 4, the program calls gst_buffer_unmap with an uninitialized map variable. Then, in the gst_memory_unmap function, the program will attempt to unmap the buffer using the uninitialized map variable, causing a function pointer hijack, as it will jump to mem->allocator->mem_unmap_full or mem->allocator->mem_unmap. This vulnerability could allow an attacker to hijack the execution flow, potentially leading to code execution. This vulnerability is fixed in 1.24.10.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:11148 advisory.

    GStreamer is a streaming media framework based on graphs of filters which operate on media data. The     gstreamer1-plugins-good packages contain a collection of well-supported plug-ins of good quality and under     the LGPL license.

    Security Fix(es):

    * gstreamer1-plugins-good: uninitialized stack memory in Matroska/WebM demuxer (CVE-2024-47540)

    * gstreamer1-plugins-good: OOB-write in isomp4/qtdemux.c (CVE-2024-47537)

    * gstreamer1-plugins-good: OOB-write in convert_to_s334_1a (CVE-2024-47539)

    * gstreamer1-plugins-good: null pointer dereference in gst_gdk_pixbuf_dec_flush (CVE-2024-47613)

    * gstreamer1-plugins-good: integer overflows in MP4/MOV demuxer and memory allocator that can lead to out-     of-bounds writes (CVE-2024-47606)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:11149 advisory.

    GStreamer is a streaming media framework based on graphs of filters which operate on media data. The     gstreamer1-plugins-good packages contain a collection of well-supported plug-ins of good quality and under     the LGPL license.

    Security Fix(es):

    * gstreamer1-plugins-good: uninitialized stack memory in Matroska/WebM demuxer (CVE-2024-47540)

    * gstreamer1-plugins-good: OOB-write in isomp4/qtdemux.c (CVE-2024-47537)

    * gstreamer1-plugins-good: OOB-write in convert_to_s334_1a (CVE-2024-47539)

    * gstreamer1-plugins-good: null pointer dereference in gst_gdk_pixbuf_dec_flush (CVE-2024-47613)

    * gstreamer1-plugins-good: integer overflows in MP4/MOV demuxer and memory allocator that can lead to out-     of-bounds writes (CVE-2024-47606)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:11299 advisory.

    GStreamer is a streaming media framework based on graphs of filters which operate on media data. The     gstreamer1-plugins-good packages contain a collection of well-supported plug-ins of good quality and under     the LGPL license.

    Security Fix(es):

    * gstreamer1-plugins-good: uninitialized stack memory in Matroska/WebM demuxer (CVE-2024-47540)

    * gstreamer1-plugins-good: OOB-write in isomp4/qtdemux.c (CVE-2024-47537)

    * gstreamer1-plugins-good: OOB-write in convert_to_s334_1a (CVE-2024-47539)

    * gstreamer1-plugins-good: null pointer dereference in gst_gdk_pixbuf_dec_flush (CVE-2024-47613)

    * gstreamer1-plugins-good: integer overflows in MP4/MOV demuxer and memory allocator that can lead to out-     of-bounds writes (CVE-2024-47606)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:11298 advisory.

    GStreamer is a streaming media framework based on graphs of filters which operate on media data. The     gstreamer1-plugins-good packages contain a collection of well-supported plug-ins of good quality and under     the LGPL license.

    Security Fix(es):

    * gstreamer1-plugins-good: uninitialized stack memory in Matroska/WebM demuxer (CVE-2024-47540)

    * gstreamer1-plugins-good: OOB-write in isomp4/qtdemux.c (CVE-2024-47537)

    * gstreamer1-plugins-good: OOB-write in convert_to_s334_1a (CVE-2024-47539)

    * gstreamer1-plugins-good: null pointer dereference in gst_gdk_pixbuf_dec_flush (CVE-2024-47613)

    * gstreamer1-plugins-good: integer overflows in MP4/MOV demuxer and memory allocator that can lead to out-     of-bounds writes (CVE-2024-47606)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-11299 advisory.

    [1.16.1-5]
    - CVE-2024-47537, CVE-2024-47539, CVE-2024-47540, CVE-2024-47606,       CVE-2024-47613       Resolves: RHEL-70949, RHEL-70962, RHEL-70936, RHEL-71022       Resolves: RHEL-70998

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:11122 advisory.

    GStreamer is a streaming media framework based on graphs of filters which operate on media data. The     gstreamer1-plugins-good packages contain a collection of well-supported plug-ins of good quality and under     the LGPL license.

    Security Fix(es):

    * gstreamer1-plugins-good: uninitialized stack memory in Matroska/WebM demuxer (CVE-2024-47540)

    * gstreamer1-plugins-good: OOB-write in isomp4/qtdemux.c (CVE-2024-47537)

    * gstreamer1-plugins-good: OOB-write in convert_to_s334_1a (CVE-2024-47539)

    * gstreamer1-plugins-good: null pointer dereference in gst_gdk_pixbuf_dec_flush (CVE-2024-47613)

    * gstreamer1-plugins-good: integer overflows in MP4/MOV demuxer and memory allocator that can lead to out-     of-bounds writes (CVE-2024-47606)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:11121 advisory.

    GStreamer is a streaming media framework based on graphs of filters which operate on media data. The     gstreamer1-plugins-good packages contain a collection of well-supported plug-ins of good quality and under     the LGPL license.

    Security Fix(es):

    * gstreamer1-plugins-good: uninitialized stack memory in Matroska/WebM demuxer (CVE-2024-47540)

    * gstreamer1-plugins-good: OOB-write in isomp4/qtdemux.c (CVE-2024-47537)

    * gstreamer1-plugins-good: OOB-write in convert_to_s334_1a (CVE-2024-47539)

    * gstreamer1-plugins-good: null pointer dereference in gst_gdk_pixbuf_dec_flush (CVE-2024-47613)

    * gstreamer1-plugins-good: integer overflows in MP4/MOV demuxer and memory allocator that can lead to out-     of-bounds writes (CVE-2024-47606)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:11119 advisory.

    GStreamer is a streaming media framework based on graphs of filters which operate on media data. The     gstreamer1-plugins-good packages contain a collection of well-supported plug-ins of good quality and under     the LGPL license.

    Security Fix(es):

    * gstreamer1-plugins-good: uninitialized stack memory in Matroska/WebM demuxer (CVE-2024-47540)

    * gstreamer1-plugins-good: OOB-write in isomp4/qtdemux.c (CVE-2024-47537)

    * gstreamer1-plugins-good: OOB-write in convert_to_s334_1a (CVE-2024-47539)

    * gstreamer1-plugins-good: null pointer dereference in gst_gdk_pixbuf_dec_flush (CVE-2024-47613)

    * gstreamer1-plugins-good: integer overflows in MP4/MOV demuxer and memory allocator that can lead to out-     of-bounds writes (CVE-2024-47606)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-11122 advisory.

    [1.22.1-3]
    - CVE-2024-47537, CVE-2024-47539, CVE-2024-47540, CVE-2024-47606,       CVE-2024-47613       Resolves: RHEL-70954, RHEL-70967, RHEL-70941, RHEL-71027,       Resolves: RHEL-71003

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 750ab972-b3e8-11ef-b680-4ccc6adda413 advisory.

    The GStreamer Security Center reports:
    20 security bugs.

Tenable has extracted the preceding description block directly from the FreeBSD security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
213160	RHEL 8 : gstreamer1-plugins-good (RHSA-2024:11148)	Nessus	Red Hat Local Security Checks	high
213159	RHEL 8 : gstreamer1-plugins-good (RHSA-2024:11149)	Nessus	Red Hat Local Security Checks	high
213146	RHEL 8 : gstreamer1-plugins-good (RHSA-2024:11299)	Nessus	Red Hat Local Security Checks	high
213144	RHEL 9 : gstreamer1-plugins-good (RHSA-2024:11298)	Nessus	Red Hat Local Security Checks	high
213135	Oracle Linux 8 : gstreamer1-plugins-good (ELSA-2024-11299)	Nessus	Oracle Linux Local Security Checks	high
213115	RHEL 9 : gstreamer1-plugins-good (RHSA-2024:11122)	Nessus	Red Hat Local Security Checks	high
213113	RHEL 9 : gstreamer1-plugins-good (RHSA-2024:11121)	Nessus	Red Hat Local Security Checks	high
213103	RHEL 9 : gstreamer1-plugins-good (RHSA-2024:11119)	Nessus	Red Hat Local Security Checks	high
213055	Oracle Linux 9 : gstreamer1-plugins-good (ELSA-2024-11122)	Nessus	Oracle Linux Local Security Checks	high
212149	FreeBSD : gstreamer1-plugins-good -- multiple vulnerabilities (750ab972-b3e8-11ef-b680-4ccc6adda413)	Nessus	FreeBSD Local Security Checks	critical

Detections

Analytics

CVE-2024-47540

high

Tenable Plugins

high

high

high

high

high

high

high

high

high

critical