The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:4971-1 advisory.

    - CVE-2023-44446: Fixed GStreamer MXF File Parsing Use-After-Free (bsc#1217213).
    - CVE-2023-40475: Fixed GStreamer MXF File Parsing Integer Overflow (bsc#1215792).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 11 / 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5533 advisory.

    Multiple vulnerabilities were discovered in plugins for the GStreamer media framework and its codecs and     demuxers, which may result in denial of service or potentially the execution of arbitrary code if a     malformed media file is opened. For the oldstable distribution (bullseye), these problems have been fixed     in version 1.18.4-3+deb11u2. For the stable distribution (bookworm), these problems have been fixed in     version 1.22.0-4+deb12u2. We recommend that you upgrade your gst-plugins-bad1.0 packages. For the detailed     security status of gst-plugins-bad1.0 please refer to its security tracker page at: https://security-     tracker.debian.org/tracker/gst-plugins-bad1.0

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3633 advisory.

    - -------------------------------------------------------------------------     Debian LTS Advisory DLA-3633-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                    Thorsten Alteholz     October 28, 2023                              https://wiki.debian.org/LTS
    - -------------------------------------------------------------------------

    Package        : gst-plugins-bad1.0     Version        : 1.14.4-1+deb10u4     CVE ID         : CVE-2023-40474 CVE-2023-40475 CVE-2023-40476


    Multiple vulnerabilities were discovered in plugins for the GStreamer     media framework and its codecs and demuxers, which may result in denial     of service or potentially the execution of arbitrary code if a malformed     media file is opened.


    For Debian 10 buster, these problems have been fixed in version     1.14.4-1+deb10u4.

    We recommend that you upgrade your gst-plugins-bad1.0 packages.

    For the detailed security status of gst-plugins-bad1.0 please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/gst-plugins-bad1.0

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-2024_2287 advisory.

    * gstreamer-plugins-bad: Integer overflow leading to heap overwrite in MXF file handling with uncompressed     video (CVE-2023-40474)

    * gstreamer-plugins-bad: Integer overflow leading to heap overwrite in MXF file handling with AES3 audio     (CVE-2023-40475)

    * gstreamer-plugins-bad: Integer overflow in H.265 video parser leading to stack overwrite     (CVE-2023-40476)

    * gstreamer-plugins-bad-free: buffer overflow vulnerability (CVE-2023-50186)

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update of the gst package has been released.

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8205-1 advisory.

    It was discovered that multiple plugins in GStreamer contained arithmetic overflows. An attacker could     possibly use this issue to cause applications using the plugins to crash, resulting in a denial of     service, or possibly execute arbitrary code. (CVE-2023-37329, CVE-2023-40474, CVE-2023-40475,     CVE-2023-40476)

    It was discovered that the MXF demuxer plugin in GStreamer did not properly manage memory. An attacker     could possibly use this issue to cause applications using the plugin to crash, resulting in a denial of     service, or possibly execute arbitrary code. (CVE-2023-44446)

    It was discovered that the H265 codec plugin in GStreamer could be made to write out of bounds. An     attacker could possibly use this issue to cause applications using the plugin to crash, resulting in a     denial of service, or possibly execute arbitrary code. (CVE-2025-3887)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
187304	SUSE SLES15: gstreamer-plugins-bad / gstreamer-plugins-bad-chromaprint / etc (SUSE-SU-2023:4971-1)	Nessus	SuSE Local Security Checks	2023/12/26	2026/6/25	high
183876	Debian DSA-5533-1 : gst-plugins-bad1.0 - security update	Nessus	Debian Local Security Checks	2023/10/25	2025/1/24	high
184004	Debian dla-3633 : gir1.2-gst-plugins-bad-1.0 - security update	Nessus	Debian Local Security Checks	2023/10/29	2025/1/22	high
354708	Rocky Linux 9 [CIQ] Security Update: gstreamer1-plugins-bad-free / gstreamer1-plugins-bad-free-debuginfo / etc Multiple Vulnerabilities (crlsa-2024_2287)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/1	high
204247	Photon OS 5.0: Gst PHSA-2023-5.0-0145	Nessus	PhotonOS Local Security Checks	2024/7/24	2026/10/13	high
310734	Ubuntu 16.04 LTS / 18.04 LTS : GStreamer Bad Plugins vulnerabilities (USN-8205-1)	Nessus	Ubuntu Local Security Checks	2026/4/28	2026/4/28	high
332579	Photon OS 5.0: Gst PHSA-2023-5.0-91-0145	Nessus	PhotonOS Local Security Checks	2026/8/5	2026/11/2	high

检测

插件搜索

high

high

high

high

high

high

high