It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1994 advisory.

    A flaw was found in GStreamer's gst-plugins-bad package. When processing a specially crafted H.264 video     file containing malformed MVC or SVC extension slice NAL units, a 1-byte heap out-of-bounds read can occur     during parsing. This happens when the parser attempts to check slice boundary information without first     verifying that the NAL unit contains enough data beyond the extension header. An attacker could exploit     this by tricking a user into opening a malicious H.264 video file, potentially causing the application to     crash or leak a single byte of heap memory. (CVE-2026-12892)

    A heap buffer overflow vulnerability was found in GStreamer's rfbsrc plugin. When a client connects to a     malicious RFB/VNC server that advertises a 16bpp framebuffer and sends Hextile-encoded updates, the     Hextile background fill path writes 32-bit pixel values into a buffer allocated for 16-bit pixels. This     type mismatch causes an out-of-bounds heap write that can lead to denial of service (process crash) and     potential memory corruption. (CVE-2026-59691)

    A stack buffer overflow vulnerability was found in GStreamer's DTLS plugin. During a DTLS handshake, the     peer certificate Subject Distinguished Name is printed into a fixed-size 2048-byte stack buffer without     bounds checking. A remote unauthenticated attacker can send a certificate with an oversized Subject DN     that exceeds the buffer, causing a stack buffer overflow and process crash, resulting in denial of     service. (CVE-2026-59692)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:47179 advisory.

    * gstreamer: gstreamer: rfbsrc/librfb Hextile heap out-of-bounds write with 16bpp framebuffer     (CVE-2026-59691)
      * gstreamer: gstreamer: DTLS certificate Subject DN stack buffer overflow in openssl_verify_callback     (CVE-2026-59692)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0819 advisory.

    Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:

    CVE-2026-59691:
    A heap buffer overflow vulnerability was found in GStreamer's rfbsrc plugin. When a client connects to a     malicious RFB/VNC server that advertises a 16bpp framebuffer and sends Hextile-encoded updates, the     Hextile background fill path writes 32-bit pixel values into a buffer allocated for 16-bit pixels. This     type mismatch causes an out-of-bounds heap write that can lead to denial of service (process crash) and     potential memory corruption.

    CVE-2026-59692:
    A stack buffer overflow vulnerability was found in GStreamer's DTLS plugin. During a DTLS handshake, the     peer certificate Subject Distinguished Name is printed into a fixed-size 2048-byte stack buffer without     bounds checking. A remote unauthenticated attacker can send a certificate with an oversized Subject DN     that exceeds the buffer, causing a stack buffer overflow and process crash, resulting in denial of     service.

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A stack buffer overflow vulnerability was found in GStreamer's DTLS plugin. During a DTLS handshake, the     peer certificate Subject Distinguished Name is printed into a fixed-size 2048-byte stack buffer without     bounds checking. A remote unauthenticated attacker can send a certificate with an oversized Subject DN     that exceeds the buffer, causing a stack buffer overflow and process crash, resulting in denial of     service. (CVE-2026-59692)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3125-1 advisory.

    - CVE-2026-12892: 1-byte heap out-of-bounds read in H.264 NAL extension slice parser (bsc#1268971).
    - CVE-2026-14935: webrtcbin accepts remote SDP without a=fingerprint due to inverted presence check     (bsc#1271051).
    - CVE-2026-52720: invalid check of total area instead of individual dimensions could trigger a heap out-     of-bounds write       (bsc#1268406).
    - CVE-2026-52721: crafted PCAP records during IPv4 or TCP header parsing could cause an out-of-bounds read       (bsc#1268408).
    - CVE-2026-52722: crafted VMnc stream with large cursor dimensions can overflow signed integer     (bsc#1268410).
    - CVE-2026-53702: incorrect loop bound during H.265 SEI message parsing could result in a stack buffer     overflow       (bsc#1268168).
    - CVE-2026-59692: unvalidated peer certificate Subject DN printed during a DTLS handshake could cause a     stack buffer       overflow (bsc#1271168).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-47731 advisory.

    - Fix buffer overflow in DTLS certificate subject DN handling       (CVE-2026-59692)       Resolves: RHEL-193570

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:47179 advisory.

    * gstreamer: gstreamer: rfbsrc/librfb Hextile heap out-of-bounds write with 16bpp framebuffer     (CVE-2026-59691)

    * gstreamer: gstreamer: DTLS certificate Subject DN stack buffer overflow in openssl_verify_callback     (CVE-2026-59692)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101094 advisory.

    A stack buffer overflow vulnerability was found in GStreamer's DTLS plugin. During a DTLS handshake, the     peer certificate Subject Distinguished Name is printed into a fixed-size 2048-byte stack buffer without     bounds checking. A remote unauthenticated attacker can send a certificate with an oversized Subject DN     that exceeds the buffer, causing a stack buffer overflow and process crash, resulting in denial of     service.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
332026	Amazon Linux 2023 : gstreamer1-plugin-openh264, gstreamer1-plugins-bad-free, gstreamer1-plugins-bad-free-devel (ALAS2023-2026-1994)	Nessus	Amazon Linux Local Security Checks	2026/8/4	2026/8/7	high
333099	AlmaLinux 9 : gstreamer1-plugins-bad-free (ALSA-2026:47179)	Nessus	Alma Linux Local Security Checks	2026/8/6	2026/8/7	high
333141	TencentOS Server 3: gstreamer1-plugins-bad-free (TSSA-2026:0819)	Nessus	Tencent Local Security Checks	2026/8/6	2026/8/7	high
325933	Linux Distros Unpatched Vulnerability : CVE-2026-59692	Nessus	Misc.	2026/7/9	2026/9/2	high
328680	SUSE SLES15: gstreamer-plugins-bad / gstreamer-plugins-bad-chromaprint / etc (SUSE-SU-2026:3125-1)	Nessus	SuSE Local Security Checks	2026/7/21	2026/7/31	high
331371	Oracle Linux 8 : gstreamer1-plugins-bad-free (ELSA-2026-47731)	Nessus	Oracle Linux Local Security Checks	2026/7/31	2026/8/7	high
331679	RockyLinux 9 : gstreamer1-plugins-bad-free (RLSA-2026:47179)	Nessus	Rocky Linux Local Security Checks	2026/8/3	2026/8/7	high
336596	Unity Linux 20.1060a / 20.1070a Security Update: gstreamer1-plugins-bad-free (UTSA-2026-101094)	Nessus	Unity Linux Local Security Checks	2026/8/17	2026/8/17	high

检测

插件搜索

high

high

high

high

high

high

high

high