gstreamer1-plugins-base-1.10.4-2.0.3.el7.AXS7
エラータID: AXSA:2025-11445:03
リリース日:
2025/12/04 Thursday - 16:22
題名:
gstreamer1-plugins-base-1.10.4-2.0.3.el7.AXS7
影響のあるチャネル:
Asianux Server 7 for x86_64
Severity:
High
Description:
以下項目について対処しました。
[Security Fix]
- GStreamer の vorbis_parse.c の gst_parse_vorbis_setup_packet()
関数には、メモリ領域の範囲外書き込みの問題があるため、ローカルの
攻撃者により、細工されたファイルの入力を介して、データ破壊、および
サービス拒否攻撃などを可能とする脆弱性が存在します。(CVE-2024-47615)
解決策:
パッケージをアップデートしてください。
CVE:
CVE-2024-47615
GStreamer is a library for constructing graphs of media-handling components. An OOB-Write has been detected in the function gst_parse_vorbis_setup_packet within vorbis_parse.c. The integer size is read from the input file without proper validation. As a result, size can exceed the fixed size of the pad->vorbis_mode_sizes array (which size is 256). When this happens, the for loop overwrites the entire pad structure with 0s and 1s, affecting adjacent memory as well. This OOB-write can overwrite up to 380 bytes of memory beyond the boundaries of the pad->vorbis_mode_sizes array. This vulnerability is fixed in 1.24.10.
GStreamer is a library for constructing graphs of media-handling components. An OOB-Write has been detected in the function gst_parse_vorbis_setup_packet within vorbis_parse.c. The integer size is read from the input file without proper validation. As a result, size can exceed the fixed size of the pad->vorbis_mode_sizes array (which size is 256). When this happens, the for loop overwrites the entire pad structure with 0s and 1s, affecting adjacent memory as well. This OOB-write can overwrite up to 380 bytes of memory beyond the boundaries of the pad->vorbis_mode_sizes array. This vulnerability is fixed in 1.24.10.
追加情報:
N/A
ダウンロード:
Asianux Server 7 for x86_64
- gstreamer1-plugins-base-1.10.4-2.0.3.el7.AXS7.i686.rpm
MD5: e701b549987f742de4a4993971708e4e
SHA-256: 599b2df0c36f7bca1d74f16899209bcd9f3f9c5d7422804c648d6e32014c119d
Size: 1.43 MB - gstreamer1-plugins-base-1.10.4-2.0.3.el7.AXS7.x86_64.rpm
MD5: 01198c97d61157357bcc0e646e87fae3
SHA-256: cb035f16c52a70492f1df650ee6d066bedd7af97a06e9762de0b9da998ca2a7b
Size: 1.42 MB - gstreamer1-plugins-base-devel-1.10.4-2.0.3.el7.AXS7.i686.rpm
MD5: 320dc36acad5be8ed6522881a2a880b6
SHA-256: 5facb9cb8b89e3fc11b267fab72568e9f20f005a5690bedf0b312793154d17c5
Size: 299.55 kB - gstreamer1-plugins-base-devel-1.10.4-2.0.3.el7.AXS7.x86_64.rpm
MD5: 8cd448bb5532798c5a367ee132410615
SHA-256: d2ce85f3d571617f493acfdf31cf20c699f0d3a0430c2e744c15c75b8b3be888
Size: 299.59 kB
English