The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - GStreamer AV1 Codec Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This     vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer.
    Interaction with this library is required to exploit this vulnerability but attack vectors may vary     depending on the implementation. The specific flaw exists within the parsing of AV1 encoded video files.
    The issue results from the lack of proper validation of the length of user-supplied data prior to copying     it to a fixed-length heap-based buffer. An attacker can leverage this vulnerability to execute code in the     context of the current process. Was ZDI-CAN-22226. (CVE-2023-44429)

Note that Nessus relies on the presence of the package as reported by the vendor.

An update of the gstreamer package has been released.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:4875-1 advisory.

    - CVE-2023-44429: Fixed GStreamer AV1 Codec Parsing Heap-based Buffer Overflow (bsc#1217211).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:0657 advisory.

    Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:

    CVE-2023-44429:
    GStreamer AV1 Codec Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This     vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer.
    Interaction with this library is required to exploit this vulnerability but attack vectors may vary     depending on the implementation.

    The specific flaw exists within the parsing of AV1 encoded video files. The issue results from the lack of     proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based     buffer. An attacker can leverage this vulnerability to execute code in the context of the current process.
    Was ZDI-CAN-22226.

    CVE-2023-44446:
    A use-after-free flaw was found in the MXF demuxer in GStreamer when handling certain MXF video files.
    This issue could allow a malicious third party to trigger a crash in the application and may allow code     execution.

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:7792 advisory.

    GStreamer is a streaming media framework based on graphs of filters which operate on media data. The     gstreamer1-plugins-bad-free package contains a collection of plug-ins for GStreamer.

    Security Fix(es):

    * gstreamer: AV1 codec parser heap-based buffer overflow (CVE-2023-44429)

    * gstreamer: MXF demuxer use-after-free vulnerability (CVE-2023-44446)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2023:7791 advisory.

  - Fixes for GStreamer-SA-2023-0010 (ZDI-CAN-22299)  and GStreamer-SA-2023-0009 (ZDI-CAN-22226)     (CVE-2023-44429)    (CVE-2023-44429)

  - MXF demuxer use-after-free vulnerability [fedora-all] (CVE-2023-44446)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:7873 advisory.

    GStreamer is a streaming media framework based on graphs of filters which operate on media data. The     gstreamer1-plugins-bad-free package contains a collection of plug-ins for GStreamer.

    Security Fix(es):

    * gstreamer: AV1 codec parser heap-based buffer overflow (CVE-2023-44429)

    * gstreamer: MXF demuxer use-after-free vulnerability (CVE-2023-44446)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:4874-1 advisory.

    - CVE-2023-44429: Fixed GStreamer AV1 Codec Parsing Heap-based Buffer Overflow (bsc#1217211).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 39 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2023-1661e0af22 advisory.

    Fixes for GStreamer-SA-2023-0010 (ZDI-CAN-22299)  and GStreamer-SA-2023-0009 (ZDI-CAN-22226)     (CVE-2023-44429)



Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 39 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2023-6a4aea6d13 advisory.

    1.22.7



Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2023-7048:03 advisory.

    * gstreamer: AV1 codec parser heap-based buffer overflow (CVE-2023-44429)
      * gstreamer: MXF demuxer use-after-free vulnerability (CVE-2023-44446)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
256019	Linux Distros Unpatched Vulnerability : CVE-2023-44429	Nessus	Misc.	2025/8/27	2026/7/16	high
204354	Photon OS 5.0: Gstreamer PHSA-2023-5.0-0167	Nessus	PhotonOS Local Security Checks	2024/7/24	2024/11/4	high
187004	SUSE SLED15: gstreamer-plugins-bad / gstreamer-plugins-bad-chromaprint / etc (SUSE-SU-2023:4875-1)	Nessus	SuSE Local Security Checks	2023/12/15	2026/6/25	high
239194	TencentOS Server 4: gstreamer1-plugins-bad-free (TSSA-2024:0657)	Nessus	Tencent Local Security Checks	2025/6/16	2025/11/20	high
186842	RHEL 9 : gstreamer1-plugins-bad-free (RHSA-2023:7792)	Nessus	Red Hat Local Security Checks	2023/12/14	2024/11/7	high
186943	AlmaLinux 9 : gstreamer1-plugins-bad-free (ALSA-2023:7791)	Nessus	Alma Linux Local Security Checks	2023/12/15	2023/12/15	high
187085	RHEL 9 : gstreamer1-plugins-bad-free (RHSA-2023:7873)	Nessus	Red Hat Local Security Checks	2023/12/19	2024/11/7	high
204259	Photon OS 4.0: Gstreamer PHSA-2023-4.0-0523	Nessus	PhotonOS Local Security Checks	2024/7/24	2024/11/4	high
187018	SUSE SLED15: gstreamer-plugins-bad / gstreamer-plugins-bad-chromaprint / etc (SUSE-SU-2023:4874-1)	Nessus	SuSE Local Security Checks	2023/12/15	2026/6/25	high
185984	Fedora 39 : gst-devtools / gstreamer1 / gstreamer1-doc / python-gstreamer1 (2023-1661e0af22)	Nessus	Fedora Local Security Checks	2023/11/18	2024/11/14	high
185982	Fedora 39 : gstreamer1-plugin-libav / gstreamer1-plugins-bad-free / etc (2023-6a4aea6d13)	Nessus	Fedora Local Security Checks	2023/11/18	2024/12/17	high
293702	MiracleLinux 9 : gstreamer1-plugins-bad-free-1.22.1-2.el9_3 (AXSA:2023-7048:03)	Nessus	Miracle Linux Local Security Checks	2026/1/20	2026/1/20	high

检测

插件搜索

high

high

high

high

high

high

high

high

high

high

high

high