First published: Wed Aug 16 2023(Updated: )
Hanno Bock discovered that GStreamer incorrecly handled certain datetime strings. An attacker could possibly use this issue to cause a denial of service or expose sensitive information.
Affected Software | Affected Version | How to fix |
---|---|---|
All of | ||
ubuntu/gstreamer1.0-tools | <1.8.3-1~ubuntu0.1+esm1 | 1.8.3-1~ubuntu0.1+esm1 |
Ubuntu | =16.04 | |
All of | ||
ubuntu/libgstreamer1.0-0 | <1.8.3-1~ubuntu0.1+esm1 | 1.8.3-1~ubuntu0.1+esm1 |
Ubuntu | =16.04 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
USN-6291-1 is classified as a critical vulnerability that can lead to denial of service or exposure of sensitive information.
To fix USN-6291-1, update the affected packages gstreamer1.0-tools and libgstreamer1.0-0 to version 1.8.3-1~ubuntu0.1+esm1.
USN-6291-1 affects Ubuntu 16.04 systems running gstreamer1.0-tools and libgstreamer1.0-0 versions prior to 1.8.3-1~ubuntu0.1+esm1.
The vulnerabilities in USN-6291-1 could allow an attacker to perform a denial of service attack or leak sensitive information from the system.
USN-6291-1 was discovered by security researcher Hanno Bock.