The remote Oracle Linux 7 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-49603 advisory.

    - Fix CVE-2026-53705 [Orabug: 39822536]
    - Security update for CVE-2026-3083 CVE-2026-3085 [Orabug: 39199326]
    - Fixes CVE-2024-47537, CVE-2024-47540, CVE-2024-47613 and

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-2026_36774 advisory.

    * gstreamer1-plugins-good: GStreamer: Heap buffer overflow in WavPack decoder via integer overflow     (CVE-2026-53705)

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 4e82a0e6-6801-42c6-8fb6-91b6b275a9e1 advisory.

    The GStreamer project reports:
    Multiple security issues were identified and fixed in the GStreamer framework.

Tenable has extracted the preceding description block directly from the FreeBSD security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2727-1 advisory.

    This update for gstreamer-plugins-good fixes the following issues

    - CVE-2024-47540: uninitialized stack memory in Matroska/WebM demuxer (bsc#1234421).
    - CVE-2026-53705: Heap buffer overflow in WavPack decoder via integer overflow (bsc#1268449).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:36774 advisory.

    * gstreamer1-plugins-good: GStreamer: Heap buffer overflow in WavPack decoder via integer overflow     (CVE-2026-53705)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2026:0202 advisory.

    Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities:

    CVE-2026-53705:
    A flaw was found in GStreamer's WavPack audio decoder in gst-plugins-good. When processing a specially     crafted WavPack file, an integer overflow in the buffer size calculation (4 * block_samples * channels) in     gst_wavpack_dec_handle_frame() causes a very small heap allocation. The WavPack library then writes     decoded audio samples far beyond the allocated buffer, resulting in heap memory corruption. This affects     both 32-bit and 64-bit systems since the arithmetic is performed in 32-bit integers before promotion to     the allocation size type. A remote attacker could use this flaw to crash an application or potentially     execute arbitrary code by convincing a user to open a malicious WavPack audio file.

Tenable has extracted the preceding description block directly from the Alibaba Cloud Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 10 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:36675 advisory.

    * gstreamer1-plugins-good: GStreamer: Heap buffer overflow in WavPack decoder via integer overflow     (CVE-2026-53705)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:49604 advisory.

    GStreamer is a streaming media framework based on graphs of filters which operate on media data. The     gstreamer1-plugins-good packages contain a collection of well-supported plug-ins of good quality and under     the LGPL license.

    Security Fix(es):

    * gstreamer1-plugins-good: GStreamer: Heap buffer overflow in WavPack decoder via integer overflow     (CVE-2026-53705)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1783971636 advisory.

  - A flaw was found in GStreamer's WavPack audio decoder in gst-plugins-good. When processing a specially     crafted WavPack file, an integer overflow in the buffer size calculation (4 * block_samples * channels) in     gst_wavpack_dec_handle_frame() causes a very small heap allocation. The WavPack library then writes     decoded audio samples far beyond the allocated buffer, resulting in heap memory corruption. This affects     both 32-bit and 64-bit systems since the arithmetic is performed in 32-bit integers before promotion to     the allocation size type. A remote attacker could use this flaw to crash an application or potentially     execute arbitrary code by convincing a user to open a malicious WavPack audio file. (CVE-2026-53705)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
334983	Oracle Linux 7 : gstreamer1-plugins-good (ELSA-2026-49603)	Nessus	Oracle Linux Local Security Checks	2026/8/12	2026/8/12	high
357743	Rocky Linux 8 [CIQ] Security Update: gstreamer1-plugins-good / gstreamer1-plugins-good-debuginfo / etc (crlsa-2026_36774)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/1	high
323684	FreeBSD : gstreamer1 -- multiple vulnerabilities (4e82a0e6-6801-42c6-8fb6-91b6b275a9e1)	Nessus	FreeBSD Local Security Checks	2026/6/29	2026/7/31	high
325035	SUSE SLES12 Security Update : gstreamer-plugins-good (SUSE-SU-2026:2727-1)	Nessus	SuSE Local Security Checks	2026/7/3	2026/7/15	high
326064	AlmaLinux 8 : gstreamer1-plugins-good (ALSA-2026:36774)	Nessus	Alma Linux Local Security Checks	2026/7/9	2026/7/15	high
327255	Alibaba Cloud Linux 3 : 0202: gstreamer1-plugins-good (ALINUX3-SA-2026:0202)	Nessus	Alibaba Cloud Linux Local Security Checks	2026/7/16	2026/7/17	high
328797	AlmaLinux 10 : gstreamer1-plugins-good (ALSA-2026:36675)	Nessus	Alma Linux Local Security Checks	2026/7/21	2026/7/21	high
331748	RHEL 8 : gstreamer1-plugins-good (RHSA-2026:49604)	Nessus	Red Hat Local Security Checks	2026/8/3	2026/8/3	high
361937	Rocky Linux 9.6 [TuxCare] Security Update: gstreamer1-plugins-good / gstreamer1-plugins-good-gtk / etc (ALMALINUX9.6:CLSA-2026:1783971636)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/1	high

检测

插件搜索

high

high

high

high

high

high

high

high

high