Test Kennung:	1.3.6.1.4.1.25623.1.1.10.2017.0348
Kategorie:	Mageia Linux Local Security Checks
Titel:	Mageia: Security Advisory (MGASA-2017-0348)
Zusammenfassung:	The remote host is missing an update for the 'gstreamer0.10-plugins-good, gstreamer1.0-plugins-good' package(s) announced via the MGASA-2017-0348 advisory.
Beschreibung:	Summary: The remote host is missing an update for the 'gstreamer0.10-plugins-good, gstreamer1.0-plugins-good' package(s) announced via the MGASA-2017-0348 advisory. Vulnerability Insight: A crafted AAC audio file could have caused an invalid read and thus corruption or denial of service (CVE-2016-10198). A crafted mp4 file could have caused an invalid read and thus corruption or denial of service (CVE-2016-10199). A crafted AVI file could have caused an invalid read and thus corruption or denial of service (CVE-2017-5840). A crafted AVI file with metadata tag entries (ncdt) could have caused invalid read access and thus corruption or denial of service (CVE-2017-5841). A crafted AVI file could have caused an invalid read access resulting in denial of service (CVE-2017-5845). Note that GStreamer 0.10 was only affected by CVE-2016-10198 and CVE-2017-5840. Affected Software/OS: 'gstreamer0.10-plugins-good, gstreamer1.0-plugins-good' package(s) on Mageia 5. Solution: Please install the updated package(s). CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2016-10198 BugTraq ID: 96001 http://www.securityfocus.com/bid/96001 Debian Security Information: DSA-3820 (Google Search) http://www.debian.org/security/2017/dsa-3820 https://security.gentoo.org/glsa/201705-10 https://lists.debian.org/debian-lts-announce/2020/05/msg00029.html http://www.openwall.com/lists/oss-security/2017/02/01/7 http://www.openwall.com/lists/oss-security/2017/02/02/9 RedHat Security Advisories: RHSA-2017:2060 https://access.redhat.com/errata/RHSA-2017:2060 Common Vulnerability Exposure (CVE) ID: CVE-2016-10199 Common Vulnerability Exposure (CVE) ID: CVE-2017-5840 Common Vulnerability Exposure (CVE) ID: CVE-2017-5841 Common Vulnerability Exposure (CVE) ID: CVE-2017-5845
Copyright	Copyright (C) 2022 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.