USN-7176-1: GStreamer Good Plugins vulnerabilities
Antonio Morales discovered that GStreamer Good Plugins incorrectly handled certain malformed media files. An attacker could use these issues to cause GStreamer Good Plugins to crash, resulting in a denial of service, or possibly execute arbitrary code.
Affected Software
Event History
Child vulnerabilities
Contains the following vulnerabilities.
- CVE-2024-47537
- CVE-2024-47776
- CVE-2024-47834
- CVE-2024-47545
- CVE-2024-47596
- CVE-2024-47546
- CVE-2024-47603
- CVE-2024-47774
- CVE-2024-47778
- CVE-2024-47540
- CVE-2024-47775
- CVE-2024-47601
- CVE-2024-47543
- CVE-2024-47777
- CVE-2024-47602
- CVE-2024-47544
- CVE-2024-47597
- CVE-2024-47598
- CVE-2024-47599
- CVE-2024-47613
- CVE-2024-47606
- CVE-2024-47539
Frequently Asked Questions
What is the severity of USN-7176-1?
The severity of USN-7176-1 is categorized as critical due to the potential for denial of service and remote code execution.
How do I fix USN-7176-1?
To fix USN-7176-1, update the affected GStreamer packages to version 1.24.8-1ubuntu1.1 or later.
Which packages are affected by USN-7176-1?
The affected packages include gstreamer1.0-gtk3, gstreamer1.0-plugins-good, gstreamer1.0-pulseaudio, gstreamer1.0-qt5, and libgstreamer-plugins-good1.0-0.
What Ubuntu versions are impacted by USN-7176-1?
USN-7176-1 impacts Ubuntu versions 22.04, 24.04, and 24.10.
Can USN-7176-1 lead to data leakage?
While USN-7176-1 primarily poses a risk of denial of service and potential remote code execution, it does not explicitly indicate data leakage.