REDHAT-BUG-2331727: Buffer Overflow
GStreamer is a library for constructing graphs of media-handling components. A stack-buffer overflow has been detected in the vorbishandleidentificationpacket function within gstvorbisdec.c. The position array is a stack-allocated buffer of size 64. If vd->vi.channels exceeds 64, the for loop will write beyond the boundaries of the position array The value written will always be GSTAUDIOCHANNELPOSITIONNONE. This vulnerability allows to overwrite the EIP address allocated in the stack. Additionally, this bug can overwrite the GstAudioInfo info structure. This vulnerability is fixed in 1.24.10.
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2331727?
REDHAT-BUG-2331727 is classified as a high severity vulnerability due to the potential for exploitation through stack-buffer overflow.
How do I fix REDHAT-BUG-2331727?
To fix REDHAT-BUG-2331727, upgrade GStreamer to the latest version, specifically 1.24.10 or later.
What type of vulnerability is REDHAT-BUG-2331727?
REDHAT-BUG-2331727 is a stack-buffer overflow vulnerability found in the vorbis_handle_identification_packet function.
Which versions of GStreamer are affected by REDHAT-BUG-2331727?
GStreamer versions prior to 1.24.10 are affected by REDHAT-BUG-2331727.
What components are involved in the REDHAT-BUG-2331727 vulnerability?
The REDHAT-BUG-2331727 vulnerability involves the GStreamer library, specifically the gstvorbisdec.c file.