The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-55865 advisory.

    - Fix ADPCM decoder negotiation and input size check       (CVE-2026-19387)       Resolves: RHEL-235496

    gstreamer1-plugins-ugly-free

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:55865 advisory.

    GStreamer is a streaming media framework based on graphs of filters which operate on media data. The     gstreamer1-plugins-bad-free package contains a collection of plug-ins for GStreamer.

    Security Fix(es):

    * gstreamer: gstreamer1-plugins-bad-free: gstreamer: heap out-of-bounds write in adpcmdec IMA/DVI ADPCM     decoder (CVE-2026-19387)

    * gstreamer: gstreamer1-plugins-ugly-free: gstreamer: integer overflow/underflow in asfdemux bounds checks     leading to out-of-bounds read (CVE-2026-19389)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-2026_55865 advisory.

    * gstreamer: gstreamer1-plugins-bad-free: gstreamer: heap out-of-bounds write in adpcmdec IMA/DVI ADPCM     decoder (CVE-2026-19387)

    * gstreamer: gstreamer1-plugins-ugly-free: gstreamer: integer overflow/underflow in asfdemux bounds checks     leading to out-of-bounds read (CVE-2026-19389)

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4839 advisory.

    -------------------------------------------------------------------------     Debian LTS Advisory DLA-4839-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                  Andreans Henriksson     October 16, 2026                              https://wiki.debian.org/LTS
    -------------------------------------------------------------------------

    Package        : gst-plugins-bad1.0     Version        : 1.22.0-4+deb12u8     CVE ID         : CVE-2026-12892 CVE-2026-14935 CVE-2026-19387 CVE-2026-52718                      CVE-2026-52719 CVE-2026-52720 CVE-2026-53702 CVE-2026-59691                      CVE-2026-59692

    Several vulnerabilities were discovered in gst-plugins-bad1.0, a collection of     plugins for the GStreamer multimedia framework. Processing specially crafted     media files or network data could lead to denial of service, disclosure of     memory contents or potentially arbitrary code execution.

    For Debian 12 bookworm, these problems have been fixed in version     1.22.0-4+deb12u8.

    We recommend that you upgrade your gst-plugins-bad1.0 packages.

    For the detailed security status of gst-plugins-bad1.0 please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/gst-plugins-bad1.0

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS     Attachment:
    signature.asc     Description: PGP signature

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
337248	Oracle Linux 9 : gstreamer1-plugins-bad-free / and / gstreamer1-plugins-ugly-free (ELSA-2026-55865)	Nessus	Oracle Linux Local Security Checks	2026/8/18	2026/8/21	high
337344	RHEL 9 : gstreamer1-plugins-bad-free and gstreamer1-plugins-ugly-free (RHSA-2026:55865)	Nessus	Red Hat Local Security Checks	2026/8/18	2026/8/21	high
354705	Rocky Linux 9 [CIQ] Security Update: gstreamer1-plugins-bad-free / gstreamer1-plugins-bad-free-debuginfo / etc Multiple Vulnerabilities (crlsa-2026_55865)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/1	high
366505	Debian dla-4839 : gir1.2-gst-plugins-bad-1.0 - security update	Nessus	Debian Local Security Checks	2026/10/16	2026/10/16	high

检测

插件搜索

high

high

high

high