CVE-2021-3522
Fixed in a distro release EPSS 5%CVSS 5.5
GStreamer before 1.18.4 may perform an out-of-bounds read when handling certain ID3v2 tags.
Products: gstreamer, netapp active_iq_unified_manager, netapp e-series_santricity_os_controller, netapp e-series_santricity_storage_manager, netapp e-series_santricity_web_services, netapp hci_management_node, netapp oncommand_insight, netapp oncommand_workflow_automation, netapp santricity_unified_manager, netapp snapmanager, netapp solidfire, oracle openjdk
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Alpine 3.18 | gst-plugins-base | 1.18.4-r0 |
| Alpine 3.19 | gst-plugins-base | 1.18.4-r0 |
| Alpine 3.20 | gst-plugins-base | 1.18.4-r0 |
| Alpine 3.21 | gst-plugins-base | 1.18.4-r0 |
| Alpine 3.22 | gst-plugins-base | 1.18.4-r0 |
| Alpine 3.23 | gst-plugins-base | 1.18.4-r0 |
| Alpine 3.24 | gst-plugins-base | 1.18.4-r0 |
| Amazon Linux 2 | gstreamer-plugins-base | 0.10.36-18.amzn2.0.2 |
| Amazon Linux 2 | gstreamer-plugins-base-devel | 0.10.36-18.amzn2.0.2 |
| Amazon Linux 2 | gstreamer-plugins-base-devel-docs | 0.10.36-18.amzn2.0.2 |
| Amazon Linux 2 | gstreamer-plugins-base-tools | 0.10.36-18.amzn2.0.2 |
| Amazon Linux 2 | gstreamer1-plugins-base | 1.10.4-2.amzn2.0.3 |
| Amazon Linux 2 | gstreamer1-plugins-base-devel | 1.10.4-2.amzn2.0.3 |
| Amazon Linux 2 | gstreamer1-plugins-base-devel-docs | 1.10.4-2.amzn2.0.3 |
| Amazon Linux 2 | gstreamer1-plugins-base-tools | 1.10.4-2.amzn2.0.3 |
| Amazon Linux 2 | java-11-amazon-corretto | 1:11.0.13+8-1.amzn2 |
| Amazon Linux 2 | java-11-amazon-corretto-headless | 1:11.0.13+8-1.amzn2 |
| Amazon Linux 2 | java-11-amazon-corretto-javadoc | 1:11.0.13+8-1.amzn2 |
| Debian 10 | gst-plugins-base1.0 | 1.14.4-2+deb10u1 |
| Debian 12 | gst-plugins-base1.0 | 1.18.4-2 |
| Debian 13 | gst-plugins-base1.0 | 1.18.4-2 |
| Debian 14 | gst-plugins-base1.0 | 1.18.4-2 |
| Debian 9 | gst-plugins-base1.0 | 1.10.4-1+deb9u2 |
| SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS | gstreamer-plugins-base | 1.12.5-150000.3.6.1 |
| SUSE Linux Enterprise Micro 5.2 | gstreamer-plugins-base | 1.16.3-150200.4.6.2 |
| SUSE Linux Enterprise Module for Basesystem 15 SP3 | gstreamer-plugins-base | 1.16.3-150200.4.6.2 |
| SUSE Linux Enterprise Module for Package Hub 15 SP3 | gstreamer-plugins-base | 1.16.3-150200.4.6.2 |
| SUSE Linux Enterprise Server 12 SP5 | gstreamer-plugins-base | 1.8.3-13.6.1 |
| SUSE Linux Enterprise Server 15 SP1-LTSS | gstreamer-plugins-base | 1.12.5-150000.3.6.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | gstreamer-plugins-base | 1.8.3-13.6.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP1 | gstreamer-plugins-base | 1.12.5-150000.3.6.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | gstreamer-0_10-plugins-base | 0.10.36-18.6.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | gstreamer-plugins-base | 1.8.3-13.6.1 |
| SUSE Linux Enterprise Workstation Extension 12 SP5 | gstreamer-0_10-plugins-base | 0.10.36-18.6.1 |
| SUSE Linux Enterprise Workstation Extension 12 SP5 | gstreamer-plugins-base | 1.8.3-13.6.1 |
| Ubuntu 18.04 LTS | gst-plugins-base1.0 | 1.14.5-0ubuntu1~18.04.3 |
| Ubuntu 20.04 LTS | gst-plugins-base1.0 | 1.16.2-4ubuntu0.1 |
| Ubuntu Pro 16.04 LTS | gst-plugins-base1.0 | 1.8.3-1ubuntu0.3+esm1 |
| openSUSE Leap 15.3 | gstreamer-plugins-base | 1.16.3-150200.4.6.2 |
| openSUSE Leap 15.4 | gstreamer-plugins-base | 1.12.5-150000.3.6.1 |
| openSUSE Leap 15.4 | gstreamer-plugins-base | 1.16.3-150200.4.6.2 |
| openSUSE Leap Micro 5.2 | gstreamer-plugins-base | 1.16.3-150200.4.6.2 |