The remote Debian 11 / 12 host has packages installed that are affected by a vulnerability as referenced in the dsa-5702 advisory.

    - -------------------------------------------------------------------------     Debian Security Advisory DSA-5702-1                   security@debian.org     https://www.debian.org/security/                     Salvatore Bonaccorso     June 01, 2024                         https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package        : gst-plugins-base1.0     CVE ID         : CVE-2024-4453

    An integer overflow in the EXIF metadata parsing was discovered in the     GStreamer media framework, which may result in denial of service or     potentially the execution of arbitrary code if a malformed file is     processed.

    For the oldstable distribution (bullseye), this problem has been fixed     in version 1.18.4-2+deb11u2.

    For the stable distribution (bookworm), this problem has been fixed in     version 1.22.0-3+deb12u2.

    We recommend that you upgrade your gst-plugins-base1.0 packages.

    For the detailed security status of gst-plugins-base1.0 please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/gst-plugins-base1.0

    Further information about Debian Security Advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Detections

Analytics

Debian dsa-5702 : gir1.2-gst-plugins-base-1.0 - security update

high Nessus Plugin ID 198299

Version 1.3

Version 1.2

Version 1.1

Version 1.3 Jun 6, 2024, 10:11 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202406062211
Version 1.2 Jun 6, 2024, 5:45 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202406061745
Version 1.1 Jun 3, 2024, 7:01 PM New Plugin Feed: 202406031901