According to the versions of the gstreamer1-plugins-good package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - Integer overflow in matroskademux element in gst_matroska_demux_add_wvpk_header function which allows a     heap overwrite while parsing matroska files. Potential for arbitrary code execution through heap     overwrite. (CVE-2022-1920)

  - Integer overflow in avidemux element in gst_avi_demux_invert function which allows a heap overwrite while     parsing avi files. Potential for arbitrary code execution through heap overwrite. (CVE-2022-1921)

  - DOS / potential heap overwrite in mkv demuxing using zlib decompression. Integer overflow in matroskademux     element in gst_matroska_decompress_data function which causes a segfault, or could cause a heap overwrite,     depending on libc and OS. Depending on the libc used, and the underlying OS capabilities, it could be just     a segfault or a heap overwrite. If the libc uses mmap for large chunks, and the OS supports mmap, then it     is just a segfault (because the realloc before the integer overflow will use mremap to reduce the size of     the chunk, and it will start to write to unmapped memory). However, if using a libc implementation that     does not use mmap, or if the OS does not support mmap while using libc, then this could result in a heap     overwrite. (CVE-2022-1922)

  - DOS / potential heap overwrite in mkv demuxing using bzip decompression. Integer overflow in matroskademux     element in bzip decompression function which causes a segfault, or could cause a heap overwrite, depending     on libc and OS. Depending on the libc used, and the underlying OS capabilities, it could be just a     segfault or a heap overwrite. If the libc uses mmap for large chunks, and the OS supports mmap, then it is     just a segfault (because the realloc before the integer overflow will use mremap to reduce the size of the     chunk, and it will start to write to unmapped memory). However, if using a libc implementation that does     not use mmap, or if the OS does not support mmap while using libc, then this could result in a heap     overwrite. (CVE-2022-1923)

  - DOS / potential heap overwrite in mkv demuxing using lzo decompression. Integer overflow in matroskademux     element in lzo decompression function which causes a segfault, or could cause a heap overwrite, depending     on libc and OS. Depending on the libc used, and the underlying OS capabilities, it could be just a     segfault or a heap overwrite. If the libc uses mmap for large chunks, and the OS supports mmap, then it is     just a segfault (because the realloc before the integer overflow will use mremap to reduce the size of the     chunk, and it will start to write to unmapped memory). However, if using a libc implementation that does     not use mmap, or if the OS does not support mmap while using libc, then this could result in a heap     overwrite. (CVE-2022-1924)

  - DOS / potential heap overwrite in mkv demuxing using HEADERSTRIP decompression. Integer overflow in     matroskaparse element in gst_matroska_decompress_data function which causes a heap overflow. Due to     restrictions on chunk sizes in the matroskademux element, the overflow can't be triggered, however the     matroskaparse element has no size checks. (CVE-2022-1925)

  - DOS / potential heap overwrite in qtdemux using zlib decompression. Integer overflow in qtdemux element in     qtdemux_inflate function which causes a segfault, or could cause a heap overwrite, depending on libc and     OS. Depending on the libc used, and the underlying OS capabilities, it could be just a segfault or a heap     overwrite. (CVE-2022-2122)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the gstreamer1-plugins-good packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - Integer overflow in matroskademux element in gst_matroska_demux_add_wvpk_header function which allows a     heap overwrite while parsing matroska files. Potential for arbitrary code execution through heap     overwrite. (CVE-2022-1920)

  - Integer overflow in avidemux element in gst_avi_demux_invert function which allows a heap overwrite while     parsing avi files. Potential for arbitrary code execution through heap overwrite. (CVE-2022-1921)

  - DOS / potential heap overwrite in mkv demuxing using zlib decompression. Integer overflow in matroskademux     element in gst_matroska_decompress_data function which causes a segfault, or could cause a heap overwrite,     depending on libc and OS. Depending on the libc used, and the underlying OS capabilities, it could be just     a segfault or a heap overwrite. If the libc uses mmap for large chunks, and the OS supports mmap, then it     is just a segfault (because the realloc before the integer overflow will use mremap to reduce the size of     the chunk, and it will start to write to unmapped memory). However, if using a libc implementation that     does not use mmap, or if the OS does not support mmap while using libc, then this could result in a heap     overwrite. (CVE-2022-1922)

  - DOS / potential heap overwrite in mkv demuxing using bzip decompression. Integer overflow in matroskademux     element in bzip decompression function which causes a segfault, or could cause a heap overwrite, depending     on libc and OS. Depending on the libc used, and the underlying OS capabilities, it could be just a     segfault or a heap overwrite. If the libc uses mmap for large chunks, and the OS supports mmap, then it is     just a segfault (because the realloc before the integer overflow will use mremap to reduce the size of the     chunk, and it will start to write to unmapped memory). However, if using a libc implementation that does     not use mmap, or if the OS does not support mmap while using libc, then this could result in a heap     overwrite. (CVE-2022-1923)

  - DOS / potential heap overwrite in mkv demuxing using lzo decompression. Integer overflow in matroskademux     element in lzo decompression function which causes a segfault, or could cause a heap overwrite, depending     on libc and OS. Depending on the libc used, and the underlying OS capabilities, it could be just a     segfault or a heap overwrite. If the libc uses mmap for large chunks, and the OS supports mmap, then it is     just a segfault (because the realloc before the integer overflow will use mremap to reduce the size of the     chunk, and it will start to write to unmapped memory). However, if using a libc implementation that does     not use mmap, or if the OS does not support mmap while using libc, then this could result in a heap     overwrite. (CVE-2022-1924)

  - DOS / potential heap overwrite in mkv demuxing using HEADERSTRIP decompression. Integer overflow in     matroskaparse element in gst_matroska_decompress_data function which causes a heap overflow. Due to     restrictions on chunk sizes in the matroskademux element, the overflow can't be triggered, however the     matroskaparse element has no size checks. (CVE-2022-1925)

  - DOS / potential heap overwrite in qtdemux using zlib decompression. Integer overflow in qtdemux element in     qtdemux_inflate function which causes a segfault, or could cause a heap overwrite, depending on libc and     OS. Depending on the libc used, and the underlying OS capabilities, it could be just a segfault or a heap     overwrite. (CVE-2022-2122)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-2260 advisory.

    [1.18.4-6]
    - Fixes for CVE-2022-1920, CVE-2022-1921, CVE-2022-1922, CVE-2022-1923,       CVE-2022-1924, CVE-2022-1925, CVE-2022-2122       Resolves: rhbz#2131034, rhbz#2131039, rhbz#2131045, rhbz#2131049,                 rhbz#2131054, rhbz#2131060, rhbz#2131064

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
164197	EulerOS 2.0 SP5 : gstreamer1-plugins-good (EulerOS-SA-2022-2269)	Nessus	Huawei Local Security Checks	2022/8/17	2023/10/13	high
165840	EulerOS 2.0 SP8 : gstreamer1-plugins-good (EulerOS-SA-2022-2463)	Nessus	Huawei Local Security Checks	2022/10/9	2023/10/10	high
175704	Oracle Linux 9 : gstreamer1-plugins-good (ELSA-2023-2260)	Nessus	Oracle Linux Local Security Checks	2023/5/15	2024/10/22	high

检测

插件搜索

high

high

high