Security Update for gst-plugins-good0.10
Summary
DLA-828-1: gst-plugins-good0.10 - security update. Affects gst-plugins-good0.10 versions < 0.10.31-3+nmu1+deb7u2. Fixed in 0.10.31-3+nmu1+deb7u2. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
gst-plugins-good0.10 is a package in the Debian 7 Wheezy ecosystem. It is a collection of GStreamer plugins that provide support for various media formats and functionalities. These plugins are used by applications to handle audio and video streams. However, gst-plugins-good0.10 is vulnerable to two memory handling issues.
Vulnerability Detail
The first vulnerability, identified as CVE-2016-10198, involves an invalid read in the aacparse element. This vulnerability can be triggered by a maliciously crafted file, potentially leading to unauthorized information disclosure or denial of service.
The second vulnerability, identified as CVE-2017-5840, is an out-of-bounds heap read in the qtdemux element. Similarly, it can be exploited through a maliciously crafted file, potentially resulting in unauthorized information disclosure or denial of service.
How To Fix
Minimum fixed version
0.10.31-3+nmu1+deb7u2
This is the first release that contains the fix.
sudo apt-get install --only-upgrade gst-plugins-good0.10Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Conclusion
gst-plugins-good0.10 is vulnerable to two memory handling issues, CVE-2016-10198 and CVE-2017-5840. To mitigate these vulnerabilities, it is crucial to upgrade the package to version 0.10.31-3+nmu1+deb7u2 or later. For further assistance or support in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for gst-plugins-good0.10 →
FAQ
gst-plugins-good0.10 is a collection of GStreamer plugins that provide support for various media formats and functionalities. It is used by applications to handle audio and video streams.
CVE-2016-10198 is a vulnerability in gst-plugins-good0.10 that involves an invalid read in the aacparse element. It can be triggered by a maliciously crafted file, potentially leading to unauthorized information disclosure or denial of service.
CVE-2017-5840 is a vulnerability in gst-plugins-good0.10 that involves an out-of-bounds heap read in the qtdemux element. It can be exploited through a maliciously crafted file, potentially resulting in unauthorized information disclosure or denial of service.
To fix these vulnerabilities, you should upgrade the gst-plugins-good0.10 package to version 0.10.31-3+nmu1+deb7u2 or later. This update includes patches that address the memory handling issues.
No, there is no known workaround for these vulnerabilities. It is recommended to apply the security update as soon as possible.
Related vulnerabilities
Recent vulnerabilities recorded for gst-plugins-good0.10.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
