Patchwire CVEs, their patch status, and feeds to follow them

CVE-2024-47607

Fixed in a distro release EPSS 1%CVSS 8.6

GStreamer is a library for constructing graphs of media-handling components. stack-buffer overflow has been detected in the gst_opus_dec_parse_header function within `gstopusdec.c'. The pos array is a stack-allocated buffer of size 64. If n_channels exceeds 64, the for loop will write beyond the boundaries of the pos array. The value written will always be GST_AUDIO_CHANNEL_POSITION_NONE. This bug allows to overwrite the EIP address allocated in the stack. This vulnerability is fixed in 1.24.10.

Published 2024-12-11 · CVE record · OSV

Products: GStreamer

Distro releases

ReleasePackageFixed in
AlmaLinux:8gstreamer1-plugins-base1.16.1-5.el8_10
AlmaLinux:8gstreamer1-plugins-base-devel1.16.1-5.el8_10
AlmaLinux:9gstreamer1-plugins-base1.22.1-3.el9_5
AlmaLinux:9gstreamer1-plugins-base-devel1.22.1-3.el9_5
AlmaLinux:9gstreamer1-plugins-base-tools1.22.1-3.el9_5
Alpine:v3.20gst-plugins-base1.24.10-r0
Alpine:v3.21gst-plugins-base1.24.10-r0
Alpine:v3.22gst-plugins-base1.24.10-r0
Alpine:v3.23gst-plugins-base1.24.10-r0
Alpine:v3.24gst-plugins-base1.24.10-r0
Debian:11gst-plugins-base1.01.18.4-2+deb11u3
Debian:12gst-plugins-base1.01.22.0-3+deb12u3
Debian:13gst-plugins-base1.01.24.10-1
Debian:14gst-plugins-base1.01.24.10-1
Red Hat:enterprise_linux:8gstreamer1-plugins-base0:1.16.1-5.el8_10
Red Hat:enterprise_linux:8gstreamer1-plugins-base-debuginfo0:1.16.1-5.el8_10
Red Hat:enterprise_linux:8gstreamer1-plugins-base-debugsource0:1.16.1-5.el8_10
Red Hat:enterprise_linux:8gstreamer1-plugins-base-devel0:1.16.1-5.el8_10
Red Hat:enterprise_linux:8gstreamer1-plugins-base-tools-debuginfo0:1.16.1-5.el8_10
Red Hat:enterprise_linux:9gstreamer1-plugins-base0:1.22.1-3.el9_5
Red Hat:enterprise_linux:9gstreamer1-plugins-base-debuginfo0:1.22.1-3.el9_5
Red Hat:enterprise_linux:9gstreamer1-plugins-base-debugsource0:1.22.1-3.el9_5
Red Hat:enterprise_linux:9gstreamer1-plugins-base-devel0:1.22.1-3.el9_5
Red Hat:enterprise_linux:9gstreamer1-plugins-base-tools0:1.22.1-3.el9_5
Red Hat:enterprise_linux:9gstreamer1-plugins-base-tools-debuginfo0:1.22.1-3.el9_5
Red Hat:rhel_aus:8.2gstreamer1-plugins-base0:1.16.1-2.el8_2
Red Hat:rhel_aus:8.2gstreamer1-plugins-base-debuginfo0:1.16.1-2.el8_2
Red Hat:rhel_aus:8.2gstreamer1-plugins-base-debugsource0:1.16.1-2.el8_2
Red Hat:rhel_aus:8.2gstreamer1-plugins-base-devel0:1.16.1-2.el8_2
Red Hat:rhel_aus:8.2gstreamer1-plugins-base-tools-debuginfo0:1.16.1-2.el8_2
Red Hat:rhel_aus:8.4gstreamer1-plugins-base0:1.16.1-3.el8_4
Red Hat:rhel_aus:8.4gstreamer1-plugins-base-debuginfo0:1.16.1-3.el8_4
Red Hat:rhel_aus:8.4gstreamer1-plugins-base-debugsource0:1.16.1-3.el8_4
Red Hat:rhel_aus:8.4gstreamer1-plugins-base-devel0:1.16.1-3.el8_4
Red Hat:rhel_aus:8.4gstreamer1-plugins-base-tools-debuginfo0:1.16.1-3.el8_4
Red Hat:rhel_aus:8.6gstreamer1-plugins-base0:1.16.1-3.el8_6
Red Hat:rhel_aus:8.6gstreamer1-plugins-base-debuginfo0:1.16.1-3.el8_6
Red Hat:rhel_aus:8.6gstreamer1-plugins-base-debugsource0:1.16.1-3.el8_6
Red Hat:rhel_aus:8.6gstreamer1-plugins-base-devel0:1.16.1-3.el8_6
Red Hat:rhel_aus:8.6gstreamer1-plugins-base-tools-debuginfo0:1.16.1-3.el8_6
Red Hat:rhel_e4s:8.4gstreamer1-plugins-base0:1.16.1-3.el8_4
Red Hat:rhel_e4s:8.4gstreamer1-plugins-base-debuginfo0:1.16.1-3.el8_4
Red Hat:rhel_e4s:8.4gstreamer1-plugins-base-debugsource0:1.16.1-3.el8_4
Red Hat:rhel_e4s:8.4gstreamer1-plugins-base-devel0:1.16.1-3.el8_4
Red Hat:rhel_e4s:8.4gstreamer1-plugins-base-tools-debuginfo0:1.16.1-3.el8_4
Red Hat:rhel_e4s:8.6gstreamer1-plugins-base0:1.16.1-3.el8_6
Red Hat:rhel_e4s:8.6gstreamer1-plugins-base-debuginfo0:1.16.1-3.el8_6
Red Hat:rhel_e4s:8.6gstreamer1-plugins-base-debugsource0:1.16.1-3.el8_6
Red Hat:rhel_e4s:8.6gstreamer1-plugins-base-devel0:1.16.1-3.el8_6
Red Hat:rhel_e4s:8.6gstreamer1-plugins-base-tools-debuginfo0:1.16.1-3.el8_6
Red Hat:rhel_e4s:9.0gstreamer1-plugins-base0:1.18.4-7.el9_0
Red Hat:rhel_e4s:9.0gstreamer1-plugins-base-debuginfo0:1.18.4-7.el9_0
Red Hat:rhel_e4s:9.0gstreamer1-plugins-base-debugsource0:1.18.4-7.el9_0
Red Hat:rhel_e4s:9.0gstreamer1-plugins-base-devel0:1.18.4-7.el9_0
Red Hat:rhel_e4s:9.0gstreamer1-plugins-base-tools-debuginfo0:1.18.4-7.el9_0
Red Hat:rhel_els:7gstreamer1-plugins-base0:1.10.4-3.el7_9
Red Hat:rhel_els:7gstreamer1-plugins-base-debuginfo0:1.10.4-3.el7_9
Red Hat:rhel_els:7gstreamer1-plugins-base-devel0:1.10.4-3.el7_9
Red Hat:rhel_els:7gstreamer1-plugins-base-devel-docs0:1.10.4-3.el7_9
Red Hat:rhel_els:7gstreamer1-plugins-base-tools0:1.10.4-3.el7_9
Red Hat:rhel_els:7gstreamer1-plugins-good0:1.10.4-3.el7_9
Red Hat:rhel_els:7gstreamer1-plugins-good-debuginfo0:1.10.4-3.el7_9
Red Hat:rhel_eus:8.8gstreamer1-plugins-base0:1.16.1-3.el8_8
Red Hat:rhel_eus:8.8gstreamer1-plugins-base-debuginfo0:1.16.1-3.el8_8
Red Hat:rhel_eus:8.8gstreamer1-plugins-base-debugsource0:1.16.1-3.el8_8
Red Hat:rhel_eus:8.8gstreamer1-plugins-base-devel0:1.16.1-3.el8_8
Red Hat:rhel_eus:8.8gstreamer1-plugins-base-tools-debuginfo0:1.16.1-3.el8_8
Red Hat:rhel_eus:9.2gstreamer1-plugins-base0:1.18.4-7.el9_2
Red Hat:rhel_eus:9.2gstreamer1-plugins-base-debuginfo0:1.18.4-7.el9_2
Red Hat:rhel_eus:9.2gstreamer1-plugins-base-debugsource0:1.18.4-7.el9_2
Red Hat:rhel_eus:9.2gstreamer1-plugins-base-devel0:1.18.4-7.el9_2
Red Hat:rhel_eus:9.2gstreamer1-plugins-base-tools0:1.18.4-7.el9_2
Red Hat:rhel_eus:9.2gstreamer1-plugins-base-tools-debuginfo0:1.18.4-7.el9_2
Red Hat:rhel_eus:9.4gstreamer1-plugins-base0:1.22.1-3.el9_4
Red Hat:rhel_eus:9.4gstreamer1-plugins-base-debuginfo0:1.22.1-3.el9_4
Red Hat:rhel_eus:9.4gstreamer1-plugins-base-debugsource0:1.22.1-3.el9_4
Red Hat:rhel_eus:9.4gstreamer1-plugins-base-devel0:1.22.1-3.el9_4
Red Hat:rhel_eus:9.4gstreamer1-plugins-base-tools0:1.22.1-3.el9_4
Red Hat:rhel_eus:9.4gstreamer1-plugins-base-tools-debuginfo0:1.22.1-3.el9_4
Red Hat:rhel_tus:8.4gstreamer1-plugins-base0:1.16.1-3.el8_4
Red Hat:rhel_tus:8.4gstreamer1-plugins-base-debuginfo0:1.16.1-3.el8_4
Red Hat:rhel_tus:8.4gstreamer1-plugins-base-debugsource0:1.16.1-3.el8_4
Red Hat:rhel_tus:8.4gstreamer1-plugins-base-devel0:1.16.1-3.el8_4
Red Hat:rhel_tus:8.4gstreamer1-plugins-base-tools-debuginfo0:1.16.1-3.el8_4
Red Hat:rhel_tus:8.6gstreamer1-plugins-base0:1.16.1-3.el8_6
Red Hat:rhel_tus:8.6gstreamer1-plugins-base-debuginfo0:1.16.1-3.el8_6
Red Hat:rhel_tus:8.6gstreamer1-plugins-base-debugsource0:1.16.1-3.el8_6
Red Hat:rhel_tus:8.6gstreamer1-plugins-base-devel0:1.16.1-3.el8_6
Red Hat:rhel_tus:8.6gstreamer1-plugins-base-tools-debuginfo0:1.16.1-3.el8_6
Rocky Linux:8gstreamer1-plugins-base0:1.16.1-5.el8_10
Rocky Linux:9gstreamer1-plugins-base0:1.22.1-3.el9_5
SUSE:Enterprise Storage 7.1gstreamer-plugins-base1.16.3-150200.4.19.1
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSSgstreamer-plugins-base1.16.3-150200.4.19.1
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOSgstreamer-plugins-base1.20.1-150400.3.11.1
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSSgstreamer-plugins-base1.20.1-150400.3.11.1
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOSgstreamer-plugins-base1.22.0-150500.3.11.1
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSSgstreamer-plugins-base1.22.0-150500.3.11.1
SUSE:Linux Enterprise Micro 5.2gstreamer-plugins-base1.16.3-150200.4.19.1
SUSE:Linux Enterprise Micro 5.3gstreamer-plugins-base1.20.1-150400.3.11.1
SUSE:Linux Enterprise Micro 5.4gstreamer-plugins-base1.20.1-150400.3.11.1
SUSE:Linux Enterprise Micro 5.5gstreamer-plugins-base1.22.0-150500.3.11.1
SUSE:Linux Enterprise Module for Basesystem 15 SP6gstreamer-plugins-base1.24.0-150600.3.8.1
SUSE:Linux Enterprise Module for Package Hub 15 SP6gstreamer-plugins-base1.24.0-150600.3.8.1
SUSE:Linux Enterprise Server 12 SP5-LTSSgstreamer-plugins-base1.8.3-13.18.1
SUSE:Linux Enterprise Server 15 SP3-LTSSgstreamer-plugins-base1.16.3-150200.4.19.1
SUSE:Linux Enterprise Server 15 SP4-LTSSgstreamer-plugins-base1.20.1-150400.3.11.1
SUSE:Linux Enterprise Server 15 SP5-LTSSgstreamer-plugins-base1.22.0-150500.3.11.1
SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5gstreamer-plugins-base1.8.3-13.18.1
SUSE:Linux Enterprise Server for SAP Applications 15 SP3gstreamer-plugins-base1.16.3-150200.4.19.1
SUSE:Linux Enterprise Server for SAP Applications 15 SP4gstreamer-plugins-base1.20.1-150400.3.11.1
SUSE:Linux Enterprise Server for SAP Applications 15 SP5gstreamer-plugins-base1.22.0-150500.3.11.1
SUSE:Linux Micro 6.0gstreamer-plugins-base1.22.9-2.1
SUSE:Linux Micro 6.1gstreamer-plugins-base1.24.7-slfo.1.1_2.1
SUSE:Manager Proxy 4.3gstreamer-plugins-base1.20.1-150400.3.11.1
SUSE:Manager Server 4.3gstreamer-plugins-base1.20.1-150400.3.11.1
Ubuntu:16.04:LTSgst-plugins-base0.10no fix
Ubuntu:20.04:LTSgst-plugins-base1.01.16.3-0ubuntu1.4
Ubuntu:22.04:LTSgst-plugins-base1.01.20.1-1ubuntu0.4
Ubuntu:24.04:LTSgst-plugins-base1.01.24.2-1ubuntu0.2
Ubuntu:Pro:16.04:LTSgst-plugins-base1.01.8.3-1ubuntu0.3+esm2
Ubuntu:Pro:18.04:LTSgst-plugins-base1.01.14.5-0ubuntu1~18.04.3+esm1
openSUSE:Leap 15.6gstreamer-plugins-base1.24.0-150600.3.8.1
openSUSE:Tumbleweedgstreamer-plugins-base1.24.11-1.1