CVE-2024-47538
Fixed in a distro release EPSS 1%CVSS 8.6
GStreamer is a library for constructing graphs of media-handling components. A stack-buffer overflow has been detected in the `vorbis_handle_identification_packet` function within `gstvorbisdec.c`. The position array is a stack-allocated buffer of size 64. If vd->vi.channels exceeds 64, the for loop will write beyond the boundaries of the position array. The value written will always be `GST_AUDIO_CHANNEL_POSITION_NONE`. This vulnerability allows someone to overwrite the EIP address allocated in the stack. Additionally, this bug can overwrite the `GstAudioInfo` info structure. This vulnerability is fixed in 1.24.10.
Products: GStreamer
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux 8 | gstreamer1-plugins-base | 1.16.1-5.el8_10 |
| AlmaLinux 8 | gstreamer1-plugins-base-devel | 1.16.1-5.el8_10 |
| AlmaLinux 9 | gstreamer1-plugins-base | 1.22.1-3.el9_5 |
| AlmaLinux 9 | gstreamer1-plugins-base-devel | 1.22.1-3.el9_5 |
| AlmaLinux 9 | gstreamer1-plugins-base-tools | 1.22.1-3.el9_5 |
| Alpine 3.20 | gst-plugins-base | 1.24.10-r0 |
| Alpine 3.21 | gst-plugins-base | 1.24.10-r0 |
| Alpine 3.22 | gst-plugins-base | 1.24.10-r0 |
| Alpine 3.23 | gst-plugins-base | 1.24.10-r0 |
| Alpine 3.24 | gst-plugins-base | 1.24.10-r0 |
| Debian 11 | gst-plugins-base1.0 | 1.18.4-2+deb11u3 |
| Debian 12 | gst-plugins-base1.0 | 1.22.0-3+deb12u3 |
| Debian 13 | gst-plugins-base1.0 | 1.24.10-1 |
| Debian 14 | gst-plugins-base1.0 | 1.24.10-1 |
| Red Hat Enterprise Linux 8 | gstreamer1-plugins-base | 0:1.16.1-5.el8_10 |
| Red Hat Enterprise Linux 8 | gstreamer1-plugins-base-debuginfo | 0:1.16.1-5.el8_10 |
| Red Hat Enterprise Linux 8 | gstreamer1-plugins-base-debugsource | 0:1.16.1-5.el8_10 |
| Red Hat Enterprise Linux 8 | gstreamer1-plugins-base-devel | 0:1.16.1-5.el8_10 |
| Red Hat Enterprise Linux 8 | gstreamer1-plugins-base-tools-debuginfo | 0:1.16.1-5.el8_10 |
| Red Hat Enterprise Linux 9 | gstreamer1-plugins-base | 0:1.22.1-3.el9_5 |
| Red Hat Enterprise Linux 9 | gstreamer1-plugins-base-debuginfo | 0:1.22.1-3.el9_5 |
| Red Hat Enterprise Linux 9 | gstreamer1-plugins-base-debugsource | 0:1.22.1-3.el9_5 |
| Red Hat Enterprise Linux 9 | gstreamer1-plugins-base-devel | 0:1.22.1-3.el9_5 |
| Red Hat Enterprise Linux 9 | gstreamer1-plugins-base-tools | 0:1.22.1-3.el9_5 |
| Red Hat Enterprise Linux 9 | gstreamer1-plugins-base-tools-debuginfo | 0:1.22.1-3.el9_5 |
| Red Hat rhel aus 8.2 | gstreamer1-plugins-base | 0:1.16.1-2.el8_2 |
| Red Hat rhel aus 8.2 | gstreamer1-plugins-base-debuginfo | 0:1.16.1-2.el8_2 |
| Red Hat rhel aus 8.2 | gstreamer1-plugins-base-debugsource | 0:1.16.1-2.el8_2 |
| Red Hat rhel aus 8.2 | gstreamer1-plugins-base-devel | 0:1.16.1-2.el8_2 |
| Red Hat rhel aus 8.2 | gstreamer1-plugins-base-tools-debuginfo | 0:1.16.1-2.el8_2 |
| Red Hat rhel aus 8.4 | gstreamer1-plugins-base | 0:1.16.1-3.el8_4 |
| Red Hat rhel aus 8.4 | gstreamer1-plugins-base-debuginfo | 0:1.16.1-3.el8_4 |
| Red Hat rhel aus 8.4 | gstreamer1-plugins-base-debugsource | 0:1.16.1-3.el8_4 |
| Red Hat rhel aus 8.4 | gstreamer1-plugins-base-devel | 0:1.16.1-3.el8_4 |
| Red Hat rhel aus 8.4 | gstreamer1-plugins-base-tools-debuginfo | 0:1.16.1-3.el8_4 |
| Red Hat rhel aus 8.6 | gstreamer1-plugins-base | 0:1.16.1-3.el8_6 |
| Red Hat rhel aus 8.6 | gstreamer1-plugins-base-debuginfo | 0:1.16.1-3.el8_6 |
| Red Hat rhel aus 8.6 | gstreamer1-plugins-base-debugsource | 0:1.16.1-3.el8_6 |
| Red Hat rhel aus 8.6 | gstreamer1-plugins-base-devel | 0:1.16.1-3.el8_6 |
| Red Hat rhel aus 8.6 | gstreamer1-plugins-base-tools-debuginfo | 0:1.16.1-3.el8_6 |
| Red Hat rhel e4s 8.4 | gstreamer1-plugins-base | 0:1.16.1-3.el8_4 |
| Red Hat rhel e4s 8.4 | gstreamer1-plugins-base-debuginfo | 0:1.16.1-3.el8_4 |
| Red Hat rhel e4s 8.4 | gstreamer1-plugins-base-debugsource | 0:1.16.1-3.el8_4 |
| Red Hat rhel e4s 8.4 | gstreamer1-plugins-base-devel | 0:1.16.1-3.el8_4 |
| Red Hat rhel e4s 8.4 | gstreamer1-plugins-base-tools-debuginfo | 0:1.16.1-3.el8_4 |
| Red Hat rhel e4s 8.6 | gstreamer1-plugins-base | 0:1.16.1-3.el8_6 |
| Red Hat rhel e4s 8.6 | gstreamer1-plugins-base-debuginfo | 0:1.16.1-3.el8_6 |
| Red Hat rhel e4s 8.6 | gstreamer1-plugins-base-debugsource | 0:1.16.1-3.el8_6 |
| Red Hat rhel e4s 8.6 | gstreamer1-plugins-base-devel | 0:1.16.1-3.el8_6 |
| Red Hat rhel e4s 8.6 | gstreamer1-plugins-base-tools-debuginfo | 0:1.16.1-3.el8_6 |
| Red Hat rhel e4s 9.0 | gstreamer1-plugins-base | 0:1.18.4-7.el9_0 |
| Red Hat rhel e4s 9.0 | gstreamer1-plugins-base-debuginfo | 0:1.18.4-7.el9_0 |
| Red Hat rhel e4s 9.0 | gstreamer1-plugins-base-debugsource | 0:1.18.4-7.el9_0 |
| Red Hat rhel e4s 9.0 | gstreamer1-plugins-base-devel | 0:1.18.4-7.el9_0 |
| Red Hat rhel e4s 9.0 | gstreamer1-plugins-base-tools-debuginfo | 0:1.18.4-7.el9_0 |
| Red Hat rhel els 7 | gstreamer1-plugins-base | 0:1.10.4-3.el7_9 |
| Red Hat rhel els 7 | gstreamer1-plugins-base-debuginfo | 0:1.10.4-3.el7_9 |
| Red Hat rhel els 7 | gstreamer1-plugins-base-devel | 0:1.10.4-3.el7_9 |
| Red Hat rhel els 7 | gstreamer1-plugins-base-devel-docs | 0:1.10.4-3.el7_9 |
| Red Hat rhel els 7 | gstreamer1-plugins-base-tools | 0:1.10.4-3.el7_9 |
| Red Hat rhel els 7 | gstreamer1-plugins-good | 0:1.10.4-3.el7_9 |
| Red Hat rhel els 7 | gstreamer1-plugins-good-debuginfo | 0:1.10.4-3.el7_9 |
| Red Hat rhel eus 8.8 | gstreamer1-plugins-base | 0:1.16.1-3.el8_8 |
| Red Hat rhel eus 8.8 | gstreamer1-plugins-base-debuginfo | 0:1.16.1-3.el8_8 |
| Red Hat rhel eus 8.8 | gstreamer1-plugins-base-debugsource | 0:1.16.1-3.el8_8 |
| Red Hat rhel eus 8.8 | gstreamer1-plugins-base-devel | 0:1.16.1-3.el8_8 |
| Red Hat rhel eus 8.8 | gstreamer1-plugins-base-tools-debuginfo | 0:1.16.1-3.el8_8 |
| Red Hat rhel eus 9.2 | gstreamer1-plugins-base | 0:1.18.4-7.el9_2 |
| Red Hat rhel eus 9.2 | gstreamer1-plugins-base-debuginfo | 0:1.18.4-7.el9_2 |
| Red Hat rhel eus 9.2 | gstreamer1-plugins-base-debugsource | 0:1.18.4-7.el9_2 |
| Red Hat rhel eus 9.2 | gstreamer1-plugins-base-devel | 0:1.18.4-7.el9_2 |
| Red Hat rhel eus 9.2 | gstreamer1-plugins-base-tools | 0:1.18.4-7.el9_2 |
| Red Hat rhel eus 9.2 | gstreamer1-plugins-base-tools-debuginfo | 0:1.18.4-7.el9_2 |
| Red Hat rhel eus 9.4 | gstreamer1-plugins-base | 0:1.22.1-3.el9_4 |
| Red Hat rhel eus 9.4 | gstreamer1-plugins-base-debuginfo | 0:1.22.1-3.el9_4 |
| Red Hat rhel eus 9.4 | gstreamer1-plugins-base-debugsource | 0:1.22.1-3.el9_4 |
| Red Hat rhel eus 9.4 | gstreamer1-plugins-base-devel | 0:1.22.1-3.el9_4 |
| Red Hat rhel eus 9.4 | gstreamer1-plugins-base-tools | 0:1.22.1-3.el9_4 |
| Red Hat rhel eus 9.4 | gstreamer1-plugins-base-tools-debuginfo | 0:1.22.1-3.el9_4 |
| Red Hat rhel tus 8.4 | gstreamer1-plugins-base | 0:1.16.1-3.el8_4 |
| Red Hat rhel tus 8.4 | gstreamer1-plugins-base-debuginfo | 0:1.16.1-3.el8_4 |
| Red Hat rhel tus 8.4 | gstreamer1-plugins-base-debugsource | 0:1.16.1-3.el8_4 |
| Red Hat rhel tus 8.4 | gstreamer1-plugins-base-devel | 0:1.16.1-3.el8_4 |
| Red Hat rhel tus 8.4 | gstreamer1-plugins-base-tools-debuginfo | 0:1.16.1-3.el8_4 |
| Red Hat rhel tus 8.6 | gstreamer1-plugins-base | 0:1.16.1-3.el8_6 |
| Red Hat rhel tus 8.6 | gstreamer1-plugins-base-debuginfo | 0:1.16.1-3.el8_6 |
| Red Hat rhel tus 8.6 | gstreamer1-plugins-base-debugsource | 0:1.16.1-3.el8_6 |
| Red Hat rhel tus 8.6 | gstreamer1-plugins-base-devel | 0:1.16.1-3.el8_6 |
| Red Hat rhel tus 8.6 | gstreamer1-plugins-base-tools-debuginfo | 0:1.16.1-3.el8_6 |
| Rocky Linux 8 | gstreamer1-plugins-base | 0:1.16.1-5.el8_10 |
| Rocky Linux 9 | gstreamer1-plugins-base | 0:1.22.1-3.el9_5 |
| SUSE Enterprise Storage 7.1 | gstreamer-plugins-base | 1.16.3-150200.4.19.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS | gstreamer-plugins-base | 1.16.3-150200.4.19.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS | gstreamer-plugins-base | 1.20.1-150400.3.11.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS | gstreamer-plugins-base | 1.20.1-150400.3.11.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS | gstreamer-plugins-base | 1.22.0-150500.3.11.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS | gstreamer-plugins-base | 1.22.0-150500.3.11.1 |
| SUSE Linux Enterprise Micro 5.2 | gstreamer-plugins-base | 1.16.3-150200.4.19.1 |
| SUSE Linux Enterprise Micro 5.3 | gstreamer-plugins-base | 1.20.1-150400.3.11.1 |
| SUSE Linux Enterprise Micro 5.4 | gstreamer-plugins-base | 1.20.1-150400.3.11.1 |
| SUSE Linux Enterprise Micro 5.5 | gstreamer-plugins-base | 1.22.0-150500.3.11.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP6 | gstreamer-plugins-base | 1.24.0-150600.3.8.1 |
| SUSE Linux Enterprise Module for Package Hub 15 SP6 | gstreamer-plugins-base | 1.24.0-150600.3.8.1 |
| SUSE Linux Enterprise Server 12 SP5-LTSS | gstreamer-plugins-base | 1.8.3-13.18.1 |
| SUSE Linux Enterprise Server 15 SP3-LTSS | gstreamer-plugins-base | 1.16.3-150200.4.19.1 |
| SUSE Linux Enterprise Server 15 SP4-LTSS | gstreamer-plugins-base | 1.20.1-150400.3.11.1 |
| SUSE Linux Enterprise Server 15 SP5-LTSS | gstreamer-plugins-base | 1.22.0-150500.3.11.1 |
| SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 | gstreamer-plugins-base | 1.8.3-13.18.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP3 | gstreamer-plugins-base | 1.16.3-150200.4.19.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP4 | gstreamer-plugins-base | 1.20.1-150400.3.11.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP5 | gstreamer-plugins-base | 1.22.0-150500.3.11.1 |
| SUSE Linux Micro 6.0 | gstreamer-plugins-base | 1.22.9-2.1 |
| SUSE Linux Micro 6.1 | gstreamer-plugins-base | 1.24.7-slfo.1.1_2.1 |
| SUSE Manager Proxy 4.3 | gstreamer-plugins-base | 1.20.1-150400.3.11.1 |
| SUSE Manager Server 4.3 | gstreamer-plugins-base | 1.20.1-150400.3.11.1 |
| Ubuntu 16.04 LTS | gst-plugins-base0.10 | no fix |
| Ubuntu 20.04 LTS | gst-plugins-base1.0 | 1.16.3-0ubuntu1.4 |
| Ubuntu 22.04 LTS | gst-plugins-base1.0 | 1.20.1-1ubuntu0.4 |
| Ubuntu 24.04 LTS | gst-plugins-base1.0 | 1.24.2-1ubuntu0.2 |
| Ubuntu Pro 16.04 LTS | gst-plugins-base1.0 | 1.8.3-1ubuntu0.3+esm2 |
| Ubuntu Pro 18.04 LTS | gst-plugins-base1.0 | 1.14.5-0ubuntu1~18.04.3+esm1 |
| openSUSE Leap 15.6 | gstreamer-plugins-base | 1.24.0-150600.3.8.1 |
| openSUSE Tumbleweed | gstreamer-plugins-base | 1.24.10-2.1 |