This update for gstreamer-plugins-base fixes the following issue :

Security issue fixed :

CVE-2019-9928: Fixed a heap-based overflow in the rtsp connection parser (bsc#1133375).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - GStreamer before 1.16.0 has a heap-based buffer overflow in the RTSP connection parser via a crafted     response from a server, potentially allowing remote code execution. (CVE-2019-9928)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote host is affected by the vulnerability described in GLSA-202003-33 (GStreamer Base Plugins: Heap-based buffer overflow)

    It was discovered that GStreamer Base Plugins did not correctly handle       certain malformed RTSP streams.
  Impact :

    A remote attacker could entice a user to open a specially crafted RTSP       stream with a GStreamer application, possibly resulting in the execution       of arbitrary code or a Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

This update for gstreamer-plugins-base fixes the following issue :

Security issue fixed :

  - CVE-2019-9928: Fixed a heap-based overflow in the rtsp     connection parser (bsc#1133375).

This update was imported from the SUSE:SLE-15:Update update project.

This update for gstreamer-0_10-plugins-base fixes the following issues :

Security issue fixed :

CVE-2019-9928: Fixed a heap-based overflow in the rtsp connection parser (bsc#1133375).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the gstreamer-plugins-base package installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - GStreamer before 1.16.0 has a heap-based buffer     overflow in the RTSP connection parser via a crafted     response from a server, potentially allowing remote     code execution.(CVE-2019-9928)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
136793	SUSE SLED15 / SLES15 Security Update : gstreamer-plugins-base (SUSE-SU-2020:1300-1)	Nessus	SuSE Local Security Checks	2020/5/22	2021/1/13	high
223116	Linux Distros Unpatched Vulnerability : CVE-2019-9928	Nessus	Misc.	2025/3/4	2026/8/8	high
134610	GLSA-202003-33 : GStreamer Base Plugins: Heap-based buffer overflow	Nessus	Gentoo Local Security Checks	2020/3/16	2024/3/21	high
136876	openSUSE Security Update : gstreamer-plugins-base (openSUSE-2020-678)	Nessus	SuSE Local Security Checks	2020/5/26	2024/3/8	high
126157	SUSE SLED12 / SLES12 Security Update : gstreamer-0_10-plugins-base (SUSE-SU-2019:1602-1)	Nessus	SuSE Local Security Checks	2019/6/24	2024/5/14	high
125506	EulerOS 2.0 SP5 : gstreamer-plugins-base (EulerOS-SA-2019-1579)	Nessus	Huawei Local Security Checks	2019/5/29	2024/5/20	high
138261	SUSE SLED15 / SLES15 Security Update : gstreamer-plugins-base (SUSE-SU-2020:1300-2)	Nessus	SuSE Local Security Checks	2020/7/9	2020/12/7	high

检测

插件搜索

high

high

high

high

high

high

high