REDHAT-BUG-2367919: Buffer Overflow
GStreamer H265 Codec Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation.
The specific flaw exists within the parsing of H265 slice headers. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-26596.
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2367919?
The severity of REDHAT-BUG-2367919 is critical due to the potential for remote code execution.
How do I fix REDHAT-BUG-2367919?
To fix REDHAT-BUG-2367919, update to the latest version of GStreamer that includes the security patch.
What are the potential consequences of REDHAT-BUG-2367919?
The potential consequences of REDHAT-BUG-2367919 include unauthorized remote code execution on affected systems.
Which software is affected by REDHAT-BUG-2367919?
The affected software for REDHAT-BUG-2367919 is GStreamer, specifically the H265 codec parser.
Is REDHAT-BUG-2367919 easily exploitable?
Yes, REDHAT-BUG-2367919 can be easily exploited if an attacker can interact with the GStreamer library.