SUSE update for gstreamer-plugins-bad, libvpl

Published: 2024-09-17

Risk	High
Patch available	YES
Number of vulnerabilities	6
CVE-ID	CVE-2023-22656 CVE-2023-45221 CVE-2023-47169 CVE-2023-47282 CVE-2023-48368 CVE-2023-50186
CWE-ID	CWE-125 CWE-119 CWE-787 CWE-20 CWE-122
Exploitation vector	Network
Public exploit	N/A
Vulnerable software Subscribe	Desktop Applications Module Operating systems & Components / Operating system SUSE Linux Enterprise Real Time 15 Operating systems & Components / Operating system SUSE Linux Enterprise Server for SAP Applications 15 Operating systems & Components / Operating system SUSE Linux Enterprise Server 15 Operating systems & Components / Operating system SUSE Linux Enterprise Desktop 15 Operating systems & Components / Operating system SUSE Linux Enterprise Micro Operating systems & Components / Operating system SUSE Package Hub 15 Operating systems & Components / Operating system Basesystem Module Operating systems & Components / Operating system SUSE Linux Enterprise High Performance Computing 15 Operating systems & Components / Operating system openSUSE Leap Operating systems & Components / Operating system libgstwebrtcnice-1_0-0-64bit-debuginfo Operating systems & Components / Operating system package or component gstreamer-plugins-bad-chromaprint-64bit-debuginfo Operating systems & Components / Operating system package or component libgstvulkan-1_0-0-64bit Operating systems & Components / Operating system package or component libgstcuda-1_0-0-64bit-debuginfo Operating systems & Components / Operating system package or component libgstadaptivedemux-1_0-0-64bit Operating systems & Components / Operating system package or component libgstplay-1_0-0-64bit Operating systems & Components / Operating system package or component gstreamer-plugins-bad-64bit Operating systems & Components / Operating system package or component libgstinsertbin-1_0-0-64bit Operating systems & Components / Operating system package or component libgstwebrtc-1_0-0-64bit Operating systems & Components / Operating system package or component gstreamer-plugins-bad-64bit-debuginfo Operating systems & Components / Operating system package or component libgstwayland-1_0-0-64bit Operating systems & Components / Operating system package or component libgstcodecparsers-1_0-0-64bit Operating systems & Components / Operating system package or component libgstwebrtc-1_0-0-64bit-debuginfo Operating systems & Components / Operating system package or component libgstsctp-1_0-0-64bit-debuginfo Operating systems & Components / Operating system package or component libgstisoff-1_0-0-64bit Operating systems & Components / Operating system package or component libgsturidownloader-1_0-0-64bit-debuginfo Operating systems & Components / Operating system package or component libgstvulkan-1_0-0-64bit-debuginfo Operating systems & Components / Operating system package or component libgstbadaudio-1_0-0-64bit-debuginfo Operating systems & Components / Operating system package or component gstreamer-plugins-bad-chromaprint-64bit Operating systems & Components / Operating system package or component libgstcodecparsers-1_0-0-64bit-debuginfo Operating systems & Components / Operating system package or component libgstwebrtcnice-1_0-0-64bit Operating systems & Components / Operating system package or component libgstcodecs-1_0-0-64bit Operating systems & Components / Operating system package or component libgsturidownloader-1_0-0-64bit Operating systems & Components / Operating system package or component libgstplayer-1_0-0-64bit-debuginfo Operating systems & Components / Operating system package or component libgstisoff-1_0-0-64bit-debuginfo Operating systems & Components / Operating system package or component libgstsctp-1_0-0-64bit Operating systems & Components / Operating system package or component libgstcodecs-1_0-0-64bit-debuginfo Operating systems & Components / Operating system package or component libgstva-1_0-0-64bit-debuginfo Operating systems & Components / Operating system package or component libgstadaptivedemux-1_0-0-64bit-debuginfo Operating systems & Components / Operating system package or component libgstva-1_0-0-64bit Operating systems & Components / Operating system package or component libgstmpegts-1_0-0-64bit-debuginfo Operating systems & Components / Operating system package or component libgstphotography-1_0-0-64bit Operating systems & Components / Operating system package or component libgstbasecamerabinsrc-1_0-0-64bit-debuginfo Operating systems & Components / Operating system package or component libgstcuda-1_0-0-64bit Operating systems & Components / Operating system package or component libgstplayer-1_0-0-64bit Operating systems & Components / Operating system package or component libgstphotography-1_0-0-64bit-debuginfo Operating systems & Components / Operating system package or component libgstbasecamerabinsrc-1_0-0-64bit Operating systems & Components / Operating system package or component libgstmpegts-1_0-0-64bit Operating systems & Components / Operating system package or component libgstbadaudio-1_0-0-64bit Operating systems & Components / Operating system package or component libgstwayland-1_0-0-64bit-debuginfo Operating systems & Components / Operating system package or component libgstplay-1_0-0-64bit-debuginfo Operating systems & Components / Operating system package or component libgstinsertbin-1_0-0-64bit-debuginfo Operating systems & Components / Operating system package or component gstreamer-plugins-bad-lang Operating systems & Components / Operating system package or component libgstinsertbin-1_0-0-32bit-debuginfo Operating systems & Components / Operating system package or component libgsturidownloader-1_0-0-32bit-debuginfo Operating systems & Components / Operating system package or component gstreamer-plugins-bad-32bit-debuginfo Operating systems & Components / Operating system package or component libgstplay-1_0-0-32bit-debuginfo Operating systems & Components / Operating system package or component libgstphotography-1_0-0-32bit-debuginfo Operating systems & Components / Operating system package or component libgstbadaudio-1_0-0-32bit-debuginfo Operating systems & Components / Operating system package or component libgsturidownloader-1_0-0-32bit Operating systems & Components / Operating system package or component libgstmpegts-1_0-0-32bit-debuginfo Operating systems & Components / Operating system package or component libgstva-1_0-0-32bit Operating systems & Components / Operating system package or component libgstcodecparsers-1_0-0-32bit-debuginfo Operating systems & Components / Operating system package or component libgstplayer-1_0-0-32bit Operating systems & Components / Operating system package or component gstreamer-plugins-bad-chromaprint-32bit-debuginfo Operating systems & Components / Operating system package or component libgstmpegts-1_0-0-32bit Operating systems & Components / Operating system package or component libgstcodecs-1_0-0-32bit Operating systems & Components / Operating system package or component libvpl2 Operating systems & Components / Operating system package or component libvpl Operating systems & Components / Operating system package or component libgstwebrtc-1_0-0-32bit Operating systems & Components / Operating system package or component libgstbadaudio-1_0-0-32bit Operating systems & Components / Operating system package or component libgstsctp-1_0-0-32bit Operating systems & Components / Operating system package or component libgstcuda-1_0-0-32bit Operating systems & Components / Operating system package or component libgstadaptivedemux-1_0-0-32bit-debuginfo Operating systems & Components / Operating system package or component libgstcuda-1_0-0-32bit-debuginfo Operating systems & Components / Operating system package or component libgstva-1_0-0-32bit-debuginfo Operating systems & Components / Operating system package or component libgstadaptivedemux-1_0-0-32bit Operating systems & Components / Operating system package or component libgstplay-1_0-0-32bit Operating systems & Components / Operating system package or component libgstphotography-1_0-0-32bit Operating systems & Components / Operating system package or component libgstwebrtcnice-1_0-0-32bit Operating systems & Components / Operating system package or component libgstwebrtcnice-1_0-0-32bit-debuginfo Operating systems & Components / Operating system package or component libvpl2-debuginfo Operating systems & Components / Operating system package or component libgstvulkan-1_0-0-32bit Operating systems & Components / Operating system package or component libgstsctp-1_0-0-32bit-debuginfo Operating systems & Components / Operating system package or component libgstisoff-1_0-0-32bit-debuginfo Operating systems & Components / Operating system package or component libgstbasecamerabinsrc-1_0-0-32bit Operating systems & Components / Operating system package or component gstreamer-plugins-bad-chromaprint-32bit Operating systems & Components / Operating system package or component libvpl-devel Operating systems & Components / Operating system package or component libgstvulkan-1_0-0-32bit-debuginfo Operating systems & Components / Operating system package or component libgstplayer-1_0-0-32bit-debuginfo Operating systems & Components / Operating system package or component libvpl-debugsource Operating systems & Components / Operating system package or component libgstinsertbin-1_0-0-32bit Operating systems & Components / Operating system package or component libgstwayland-1_0-0-32bit Operating systems & Components / Operating system package or component libgstwayland-1_0-0-32bit-debuginfo Operating systems & Components / Operating system package or component gstreamer-plugins-bad-32bit Operating systems & Components / Operating system package or component libgstcodecs-1_0-0-32bit-debuginfo Operating systems & Components / Operating system package or component libgstbasecamerabinsrc-1_0-0-32bit-debuginfo Operating systems & Components / Operating system package or component libgstwebrtc-1_0-0-32bit-debuginfo Operating systems & Components / Operating system package or component libgstcodecparsers-1_0-0-32bit Operating systems & Components / Operating system package or component libgstisoff-1_0-0-32bit Operating systems & Components / Operating system package or component libgstcuda-1_0-0-debuginfo Operating systems & Components / Operating system package or component libgstplayer-1_0-0 Operating systems & Components / Operating system package or component libgstva-1_0-0 Operating systems & Components / Operating system package or component gstreamer-plugins-bad-devel Operating systems & Components / Operating system package or component typelib-1_0-GstPlayer-1_0 Operating systems & Components / Operating system package or component gstreamer-transcoder-devel Operating systems & Components / Operating system package or component libgstbasecamerabinsrc-1_0-0 Operating systems & Components / Operating system package or component libgstwebrtc-1_0-0 Operating systems & Components / Operating system package or component libgstwayland-1_0-0-debuginfo Operating systems & Components / Operating system package or component typelib-1_0-GstMpegts-1_0 Operating systems & Components / Operating system package or component libgstwebrtcnice-1_0-0-debuginfo Operating systems & Components / Operating system package or component libgstvulkan-1_0-0 Operating systems & Components / Operating system package or component libgstcodecparsers-1_0-0-debuginfo Operating systems & Components / Operating system package or component libgstisoff-1_0-0 Operating systems & Components / Operating system package or component libgstadaptivedemux-1_0-0-debuginfo Operating systems & Components / Operating system package or component libgstwayland-1_0-0 Operating systems & Components / Operating system package or component typelib-1_0-GstVulkan-1_0 Operating systems & Components / Operating system package or component libgstwebrtcnice-1_0-0 Operating systems & Components / Operating system package or component libgstphotography-1_0-0-debuginfo Operating systems & Components / Operating system package or component libgstcodecs-1_0-0-debuginfo Operating systems & Components / Operating system package or component typelib-1_0-GstWebRTC-1_0 Operating systems & Components / Operating system package or component libgstsctp-1_0-0 Operating systems & Components / Operating system package or component typelib-1_0-GstTranscoder-1_0 Operating systems & Components / Operating system package or component typelib-1_0-GstCodecs-1_0 Operating systems & Components / Operating system package or component libgstva-1_0-0-debuginfo Operating systems & Components / Operating system package or component libgstplayer-1_0-0-debuginfo Operating systems & Components / Operating system package or component gstreamer-transcoder Operating systems & Components / Operating system package or component gstreamer-plugins-bad Operating systems & Components / Operating system package or component libgstisoff-1_0-0-debuginfo Operating systems & Components / Operating system package or component typelib-1_0-GstVulkanXCB-1_0 Operating systems & Components / Operating system package or component typelib-1_0-GstPlay-1_0 Operating systems & Components / Operating system package or component gstreamer-transcoder-debuginfo Operating systems & Components / Operating system package or component libgstinsertbin-1_0-0-debuginfo Operating systems & Components / Operating system package or component typelib-1_0-GstInsertBin-1_0 Operating systems & Components / Operating system package or component libgstmpegts-1_0-0 Operating systems & Components / Operating system package or component typelib-1_0-CudaGst-1_0 Operating systems & Components / Operating system package or component libgstbasecamerabinsrc-1_0-0-debuginfo Operating systems & Components / Operating system package or component libgstphotography-1_0-0 Operating systems & Components / Operating system package or component libgstinsertbin-1_0-0 Operating systems & Components / Operating system package or component libgstmpegts-1_0-0-debuginfo Operating systems & Components / Operating system package or component libgstcuda-1_0-0 Operating systems & Components / Operating system package or component typelib-1_0-GstBadAudio-1_0 Operating systems & Components / Operating system package or component typelib-1_0-GstVulkanWayland-1_0 Operating systems & Components / Operating system package or component typelib-1_0-GstCuda-1_0 Operating systems & Components / Operating system package or component libgstplay-1_0-0-debuginfo Operating systems & Components / Operating system package or component libgstplay-1_0-0 Operating systems & Components / Operating system package or component libgstsctp-1_0-0-debuginfo Operating systems & Components / Operating system package or component libgstbadaudio-1_0-0 Operating systems & Components / Operating system package or component libgstcodecs-1_0-0 Operating systems & Components / Operating system package or component gstreamer-plugins-bad-chromaprint Operating systems & Components / Operating system package or component libgstbadaudio-1_0-0-debuginfo Operating systems & Components / Operating system package or component libgstwebrtc-1_0-0-debuginfo Operating systems & Components / Operating system package or component libgsturidownloader-1_0-0 Operating systems & Components / Operating system package or component typelib-1_0-GstVa-1_0 Operating systems & Components / Operating system package or component libgsturidownloader-1_0-0-debuginfo Operating systems & Components / Operating system package or component libgstadaptivedemux-1_0-0 Operating systems & Components / Operating system package or component libgstvulkan-1_0-0-debuginfo Operating systems & Components / Operating system package or component libgstcodecparsers-1_0-0 Operating systems & Components / Operating system package or component gstreamer-plugins-bad-chromaprint-debuginfo Operating systems & Components / Operating system package or component libgsttranscoder-1_0-0 Operating systems & Components / Operating system package or component gstreamer-plugins-bad-debuginfo Operating systems & Components / Operating system package or component gstreamer-plugins-bad-debugsource Operating systems & Components / Operating system package or component libgsttranscoder-1_0-0-debuginfo Operating systems & Components / Operating system package or component
Vendor	SUSE

Security Bulletin

This security bulletin contains information about 6 vulnerabilities.

1) Out-of-bounds read

EUVDB-ID: #VU89688

Risk: Low

CVSSv3.1: 3.4 [CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C]

CVE-ID: CVE-2023-22656

CWE-ID: CWE-125 - Out-of-bounds read

Exploit availability: No

Description

The vulnerability allows a local user to gain access to potentially sensitive information.

The vulnerability exists due to a boundary condition. A local user can trigger an out-of-bounds read error and read contents of memory on the system, leading to privilege escalation.

Mitigation

Update the affected package gstreamer-plugins-bad, libvpl to the latest version.

Vulnerable software versions

Desktop Applications Module: 15-SP5 - 15-SP6

SUSE Linux Enterprise Real Time 15: SP5 - SP6

SUSE Linux Enterprise Server for SAP Applications 15: SP5 - SP6

SUSE Linux Enterprise Server 15: SP5 - SP6

SUSE Linux Enterprise Desktop 15: SP5 - SP6

SUSE Linux Enterprise Micro: 5.5

SUSE Package Hub 15: 15-SP5

Basesystem Module: 15-SP5

SUSE Linux Enterprise High Performance Computing 15: SP5

openSUSE Leap: 15.5

libgstwebrtcnice-1_0-0-64bit-debuginfo: before 1.22.0-150500.3.25.2

gstreamer-plugins-bad-chromaprint-64bit-debuginfo: before 1.22.0-150500.3.25.2

libgstvulkan-1_0-0-64bit: before 1.22.0-150500.3.25.2

libgstcuda-1_0-0-64bit-debuginfo: before 1.22.0-150500.3.25.2

libgstadaptivedemux-1_0-0-64bit: before 1.22.0-150500.3.25.2

libgstplay-1_0-0-64bit: before 1.22.0-150500.3.25.2

gstreamer-plugins-bad-64bit: before 1.22.0-150500.3.25.2

libgstinsertbin-1_0-0-64bit: before 1.22.0-150500.3.25.2

libgstwebrtc-1_0-0-64bit: before 1.22.0-150500.3.25.2

gstreamer-plugins-bad-64bit-debuginfo: before 1.22.0-150500.3.25.2

libgstwayland-1_0-0-64bit: before 1.22.0-150500.3.25.2

libgstcodecparsers-1_0-0-64bit: before 1.22.0-150500.3.25.2

libgstwebrtc-1_0-0-64bit-debuginfo: before 1.22.0-150500.3.25.2

libgstsctp-1_0-0-64bit-debuginfo: before 1.22.0-150500.3.25.2

libgstisoff-1_0-0-64bit: before 1.22.0-150500.3.25.2

libgsturidownloader-1_0-0-64bit-debuginfo: before 1.22.0-150500.3.25.2

libgstvulkan-1_0-0-64bit-debuginfo: before 1.22.0-150500.3.25.2

libgstbadaudio-1_0-0-64bit-debuginfo: before 1.22.0-150500.3.25.2

gstreamer-plugins-bad-chromaprint-64bit: before 1.22.0-150500.3.25.2

libgstcodecparsers-1_0-0-64bit-debuginfo: before 1.22.0-150500.3.25.2

libgstwebrtcnice-1_0-0-64bit: before 1.22.0-150500.3.25.2

libgstcodecs-1_0-0-64bit: before 1.22.0-150500.3.25.2

libgsturidownloader-1_0-0-64bit: before 1.22.0-150500.3.25.2

libgstplayer-1_0-0-64bit-debuginfo: before 1.22.0-150500.3.25.2

libgstisoff-1_0-0-64bit-debuginfo: before 1.22.0-150500.3.25.2

libgstsctp-1_0-0-64bit: before 1.22.0-150500.3.25.2

libgstcodecs-1_0-0-64bit-debuginfo: before 1.22.0-150500.3.25.2

libgstva-1_0-0-64bit-debuginfo: before 1.22.0-150500.3.25.2

libgstadaptivedemux-1_0-0-64bit-debuginfo: before 1.22.0-150500.3.25.2

libgstva-1_0-0-64bit: before 1.22.0-150500.3.25.2

libgstmpegts-1_0-0-64bit-debuginfo: before 1.22.0-150500.3.25.2

libgstphotography-1_0-0-64bit: before 1.22.0-150500.3.25.2

libgstbasecamerabinsrc-1_0-0-64bit-debuginfo: before 1.22.0-150500.3.25.2

libgstcuda-1_0-0-64bit: before 1.22.0-150500.3.25.2

libgstplayer-1_0-0-64bit: before 1.22.0-150500.3.25.2

libgstphotography-1_0-0-64bit-debuginfo: before 1.22.0-150500.3.25.2

libgstbasecamerabinsrc-1_0-0-64bit: before 1.22.0-150500.3.25.2

libgstmpegts-1_0-0-64bit: before 1.22.0-150500.3.25.2

libgstbadaudio-1_0-0-64bit: before 1.22.0-150500.3.25.2

libgstwayland-1_0-0-64bit-debuginfo: before 1.22.0-150500.3.25.2

libgstplay-1_0-0-64bit-debuginfo: before 1.22.0-150500.3.25.2

libgstinsertbin-1_0-0-64bit-debuginfo: before 1.22.0-150500.3.25.2

gstreamer-plugins-bad-lang: before 1.22.0-150500.3.25.2

libgstinsertbin-1_0-0-32bit-debuginfo: before 1.22.0-150500.3.25.2

libgsturidownloader-1_0-0-32bit-debuginfo: before 1.22.0-150500.3.25.2

gstreamer-plugins-bad-32bit-debuginfo: before 1.22.0-150500.3.25.2

libgstplay-1_0-0-32bit-debuginfo: before 1.22.0-150500.3.25.2

libgstphotography-1_0-0-32bit-debuginfo: before 1.22.0-150500.3.25.2

libgstbadaudio-1_0-0-32bit-debuginfo: before 1.22.0-150500.3.25.2

libgsturidownloader-1_0-0-32bit: before 1.22.0-150500.3.25.2

libgstmpegts-1_0-0-32bit-debuginfo: before 1.22.0-150500.3.25.2

libgstva-1_0-0-32bit: before 1.22.0-150500.3.25.2

libgstcodecparsers-1_0-0-32bit-debuginfo: before 1.22.0-150500.3.25.2

libgstplayer-1_0-0-32bit: before 1.22.0-150500.3.25.2

gstreamer-plugins-bad-chromaprint-32bit-debuginfo: before 1.22.0-150500.3.25.2

libgstmpegts-1_0-0-32bit: before 1.22.0-150500.3.25.2

libgstcodecs-1_0-0-32bit: before 1.22.0-150500.3.25.2

libvpl2: before 2023.0.0-150500.3.2.1

libvpl: before 2023.0.0-150500.3.2.1

libgstwebrtc-1_0-0-32bit: before 1.22.0-150500.3.25.2

libgstbadaudio-1_0-0-32bit: before 1.22.0-150500.3.25.2

libgstsctp-1_0-0-32bit: before 1.22.0-150500.3.25.2

libgstcuda-1_0-0-32bit: before 1.22.0-150500.3.25.2

libgstadaptivedemux-1_0-0-32bit-debuginfo: before 1.22.0-150500.3.25.2

libgstcuda-1_0-0-32bit-debuginfo: before 1.22.0-150500.3.25.2

libgstva-1_0-0-32bit-debuginfo: before 1.22.0-150500.3.25.2

libgstadaptivedemux-1_0-0-32bit: before 1.22.0-150500.3.25.2

libgstplay-1_0-0-32bit: before 1.22.0-150500.3.25.2

libgstphotography-1_0-0-32bit: before 1.22.0-150500.3.25.2

libgstwebrtcnice-1_0-0-32bit: before 1.22.0-150500.3.25.2

libgstwebrtcnice-1_0-0-32bit-debuginfo: before 1.22.0-150500.3.25.2

libvpl2-debuginfo: before 2023.0.0-150500.3.2.1

libgstvulkan-1_0-0-32bit: before 1.22.0-150500.3.25.2

libgstsctp-1_0-0-32bit-debuginfo: before 1.22.0-150500.3.25.2

libgstisoff-1_0-0-32bit-debuginfo: before 1.22.0-150500.3.25.2

libgstbasecamerabinsrc-1_0-0-32bit: before 1.22.0-150500.3.25.2

gstreamer-plugins-bad-chromaprint-32bit: before 1.22.0-150500.3.25.2

libvpl-devel: before 2023.0.0-150500.3.2.1

libgstvulkan-1_0-0-32bit-debuginfo: before 1.22.0-150500.3.25.2

libgstplayer-1_0-0-32bit-debuginfo: before 1.22.0-150500.3.25.2

libvpl-debugsource: before 2023.0.0-150500.3.2.1

libgstinsertbin-1_0-0-32bit: before 1.22.0-150500.3.25.2

libgstwayland-1_0-0-32bit: before 1.22.0-150500.3.25.2

libgstwayland-1_0-0-32bit-debuginfo: before 1.22.0-150500.3.25.2

gstreamer-plugins-bad-32bit: before 1.22.0-150500.3.25.2

libgstcodecs-1_0-0-32bit-debuginfo: before 1.22.0-150500.3.25.2

libgstbasecamerabinsrc-1_0-0-32bit-debuginfo: before 1.22.0-150500.3.25.2

libgstwebrtc-1_0-0-32bit-debuginfo: before 1.22.0-150500.3.25.2

libgstcodecparsers-1_0-0-32bit: before 1.22.0-150500.3.25.2

libgstisoff-1_0-0-32bit: before 1.22.0-150500.3.25.2

libgstcuda-1_0-0-debuginfo: before 1.22.0-150500.3.25.2

libgstplayer-1_0-0: before 1.22.0-150500.3.25.2

libgstva-1_0-0: before 1.22.0-150500.3.25.2

gstreamer-plugins-bad-devel: before 1.22.0-150500.3.25.2

typelib-1_0-GstPlayer-1_0: before 1.22.0-150500.3.25.2

gstreamer-transcoder-devel: before 1.22.0-150500.3.25.2

libgstbasecamerabinsrc-1_0-0: before 1.22.0-150500.3.25.2

libgstwebrtc-1_0-0: before 1.22.0-150500.3.25.2

libgstwayland-1_0-0-debuginfo: before 1.22.0-150500.3.25.2

typelib-1_0-GstMpegts-1_0: before 1.22.0-150500.3.25.2

libgstwebrtcnice-1_0-0-debuginfo: before 1.22.0-150500.3.25.2

libgstvulkan-1_0-0: before 1.22.0-150500.3.25.2

libgstcodecparsers-1_0-0-debuginfo: before 1.22.0-150500.3.25.2

libgstisoff-1_0-0: before 1.22.0-150500.3.25.2

libgstadaptivedemux-1_0-0-debuginfo: before 1.22.0-150500.3.25.2

libgstwayland-1_0-0: before 1.22.0-150500.3.25.2

typelib-1_0-GstVulkan-1_0: before 1.22.0-150500.3.25.2

libgstwebrtcnice-1_0-0: before 1.22.0-150500.3.25.2

libgstphotography-1_0-0-debuginfo: before 1.22.0-150500.3.25.2

libgstcodecs-1_0-0-debuginfo: before 1.22.0-150500.3.25.2

typelib-1_0-GstWebRTC-1_0: before 1.22.0-150500.3.25.2

libgstsctp-1_0-0: before 1.22.0-150500.3.25.2

typelib-1_0-GstTranscoder-1_0: before 1.22.0-150500.3.25.2

typelib-1_0-GstCodecs-1_0: before 1.22.0-150500.3.25.2

libgstva-1_0-0-debuginfo: before 1.22.0-150500.3.25.2

libgstplayer-1_0-0-debuginfo: before 1.22.0-150500.3.25.2

gstreamer-transcoder: before 1.22.0-150500.3.25.2

gstreamer-plugins-bad: before 1.22.0-150500.3.25.2

libgstisoff-1_0-0-debuginfo: before 1.22.0-150500.3.25.2

typelib-1_0-GstVulkanXCB-1_0: before 1.22.0-150500.3.25.2

typelib-1_0-GstPlay-1_0: before 1.22.0-150500.3.25.2

gstreamer-transcoder-debuginfo: before 1.22.0-150500.3.25.2

libgstinsertbin-1_0-0-debuginfo: before 1.22.0-150500.3.25.2

typelib-1_0-GstInsertBin-1_0: before 1.22.0-150500.3.25.2

libgstmpegts-1_0-0: before 1.22.0-150500.3.25.2

typelib-1_0-CudaGst-1_0: before 1.22.0-150500.3.25.2

libgstbasecamerabinsrc-1_0-0-debuginfo: before 1.22.0-150500.3.25.2

libgstphotography-1_0-0: before 1.22.0-150500.3.25.2

libgstinsertbin-1_0-0: before 1.22.0-150500.3.25.2

libgstmpegts-1_0-0-debuginfo: before 1.22.0-150500.3.25.2

libgstcuda-1_0-0: before 1.22.0-150500.3.25.2

typelib-1_0-GstBadAudio-1_0: before 1.22.0-150500.3.25.2

typelib-1_0-GstVulkanWayland-1_0: before 1.22.0-150500.3.25.2

typelib-1_0-GstCuda-1_0: before 1.22.0-150500.3.25.2

libgstplay-1_0-0-debuginfo: before 1.22.0-150500.3.25.2

libgstplay-1_0-0: before 1.22.0-150500.3.25.2

libgstsctp-1_0-0-debuginfo: before 1.22.0-150500.3.25.2

libgstbadaudio-1_0-0: before 1.22.0-150500.3.25.2

libgstcodecs-1_0-0: before 1.22.0-150500.3.25.2

gstreamer-plugins-bad-chromaprint: before 1.22.0-150500.3.25.2

libgstbadaudio-1_0-0-debuginfo: before 1.22.0-150500.3.25.2

libgstwebrtc-1_0-0-debuginfo: before 1.22.0-150500.3.25.2

libgsturidownloader-1_0-0: before 1.22.0-150500.3.25.2

typelib-1_0-GstVa-1_0: before 1.22.0-150500.3.25.2

libgsturidownloader-1_0-0-debuginfo: before 1.22.0-150500.3.25.2

libgstadaptivedemux-1_0-0: before 1.22.0-150500.3.25.2

libgstvulkan-1_0-0-debuginfo: before 1.22.0-150500.3.25.2

libgstcodecparsers-1_0-0: before 1.22.0-150500.3.25.2

gstreamer-plugins-bad-chromaprint-debuginfo: before 1.22.0-150500.3.25.2

libgsttranscoder-1_0-0: before 1.22.0-150500.3.25.2

gstreamer-plugins-bad-debuginfo: before 1.22.0-150500.3.25.2

gstreamer-plugins-bad-debugsource: before 1.22.0-150500.3.25.2

libgsttranscoder-1_0-0-debuginfo: before 1.22.0-150500.3.25.2

External links

http://www.suse.com/support/update/announcement/2024/suse-su-20243289-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

2) Buffer overflow

EUVDB-ID: #VU89687

Risk: Low

CVSSv3.1: 6.4 [CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2023-45221

CWE-ID: CWE-119 - Memory corruption

Exploit availability: No

Description

The vulnerability allows a local user to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error. A local user can trigger memory corruption and execute arbitrary code on the target system with elevated privileges.