REDHAT-BUG-2331753: Buffer Overflow
GStreamer is a library for constructing graphs of media-handling components. A stack-buffer overflow has been detected in the vorbishandleidentificationpacket function within gstvorbisdec.c. The position array is a stack-allocated buffer of size 64. If vd->vi.channels exceeds 64, the for loop will write beyond the boundaries of the position array. The value written will always be GSTAUDIOCHANNELPOSITIONNONE. This vulnerability allows to overwrite the EIP address allocated in the stack. Additionally, this bug can overwrite the GstAudioInfo info structure. This vulnerability is fixed in 1.24.10.
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2331753?
The severity of REDHAT-BUG-2331753 is considered high due to the potential for stack-buffer overflow vulnerabilities.
How do I fix REDHAT-BUG-2331753?
To fix REDHAT-BUG-2331753, upgrade GStreamer to a patched version later than 1.24.10.
What components are affected by REDHAT-BUG-2331753?
REDHAT-BUG-2331753 affects the GStreamer library, specifically the vorbis_handle_identification_packet function in gstvorbisdec.c.
Can REDHAT-BUG-2331753 lead to exploitation?
Yes, if exploited, REDHAT-BUG-2331753 can lead to arbitrary code execution due to stack corruption.
What versions of GStreamer are vulnerable in REDHAT-BUG-2331753?
GStreamer versions up to but not including 1.24.10 are vulnerable to REDHAT-BUG-2331753.