Test ID:	1.3.6.1.4.1.25623.1.1.10.2023.0354
Category:	Mageia Linux Local Security Checks
Title:	Mageia: Security Advisory (MGASA-2023-0354)
Summary:	The remote host is missing an update for the 'gstreamer1.0, gstreamer1.0-devtools, gstreamer1.0-editing-services, gstreamer1.0-libav, gstreamer1.0-moodbar, gstreamer1.0-omx, gstreamer1.0-plugins-bad, gstreamer1.0-plugins-base, gstreamer1.0-plugins-good, gstreamer1.0-plugins-ugly, gstreamer1.0-python, gstreamer1.0-rtsp-server, gstreamer1.0-vaapi' package(s) announced via the MGASA-2023-0354 advisory.
Description:	Summary: The remote host is missing an update for the 'gstreamer1.0, gstreamer1.0-devtools, gstreamer1.0-editing-services, gstreamer1.0-libav, gstreamer1.0-moodbar, gstreamer1.0-omx, gstreamer1.0-plugins-bad, gstreamer1.0-plugins-base, gstreamer1.0-plugins-good, gstreamer1.0-plugins-ugly, gstreamer1.0-python, gstreamer1.0-rtsp-server, gstreamer1.0-vaapi' package(s) announced via the MGASA-2023-0354 advisory. Vulnerability Insight: Updated gstreamer packages fix many security issues (see the references below). Apart from the listed CVEs, ZDI-CAN-22300 is also fixed. Affected Software/OS: 'gstreamer1.0, gstreamer1.0-devtools, gstreamer1.0-editing-services, gstreamer1.0-libav, gstreamer1.0-moodbar, gstreamer1.0-omx, gstreamer1.0-plugins-bad, gstreamer1.0-plugins-base, gstreamer1.0-plugins-good, gstreamer1.0-plugins-ugly, gstreamer1.0-python, gstreamer1.0-rtsp-server, gstreamer1.0-vaapi' package(s) on Mageia 9. Solution: Please install the updated package(s). CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2022-1920 Debian Security Information: DSA-5204 (Google Search) https://www.debian.org/security/2022/dsa-5204 https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/1226 https://lists.debian.org/debian-lts-announce/2022/08/msg00001.html Common Vulnerability Exposure (CVE) ID: CVE-2022-1922 https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/1225 Common Vulnerability Exposure (CVE) ID: CVE-2022-1923 Common Vulnerability Exposure (CVE) ID: CVE-2022-1924 Common Vulnerability Exposure (CVE) ID: CVE-2022-1925 Common Vulnerability Exposure (CVE) ID: CVE-2022-2122 Common Vulnerability Exposure (CVE) ID: CVE-2023-37327 ZDI-23-903 https://www.zerodayinitiative.com/advisories/ZDI-23-903/ vendor-provided URL https://gstreamer.freedesktop.org/security/sa-2023-0001.html Common Vulnerability Exposure (CVE) ID: CVE-2023-37328 ZDI-23-901 https://www.zerodayinitiative.com/advisories/ZDI-23-901/ https://gstreamer.freedesktop.org/security/sa-2023-0003.html Common Vulnerability Exposure (CVE) ID: CVE-2023-37329 ZDI-23-902 https://www.zerodayinitiative.com/advisories/ZDI-23-902/ https://gstreamer.freedesktop.org/security/sa-2023-0002.html Common Vulnerability Exposure (CVE) ID: CVE-2023-38103 ZDI-23-1007 https://www.zerodayinitiative.com/advisories/ZDI-23-1007/ https://gitlab.freedesktop.org/gstreamer/gstreamer/uploads/d4a0aa4ec2165f6c418703b9e1459d8b/0002-rmdemux-Check-for-integer-overflow-when-calculation-.patch Common Vulnerability Exposure (CVE) ID: CVE-2023-38104 ZDI-23-1008 https://www.zerodayinitiative.com/advisories/ZDI-23-1008/ Common Vulnerability Exposure (CVE) ID: CVE-2023-40474 ZDI-23-1456 https://www.zerodayinitiative.com/advisories/ZDI-23-1456/ https://gstreamer.freedesktop.org/security/sa-2023-0006.html Common Vulnerability Exposure (CVE) ID: CVE-2023-40475 ZDI-23-1457 https://www.zerodayinitiative.com/advisories/ZDI-23-1457/ https://gstreamer.freedesktop.org/security/sa-2023-0007.html Common Vulnerability Exposure (CVE) ID: CVE-2023-40476 ZDI-23-1458 https://www.zerodayinitiative.com/advisories/ZDI-23-1458/ https://gstreamer.freedesktop.org/security/sa-2023-0008.html Common Vulnerability Exposure (CVE) ID: CVE-2023-44429 ZDI-23-1648 https://www.zerodayinitiative.com/advisories/ZDI-23-1648/ https://gstreamer.freedesktop.org/security/sa-2023-0009.html Common Vulnerability Exposure (CVE) ID: CVE-2023-44446 ZDI-23-1647 https://www.zerodayinitiative.com/advisories/ZDI-23-1647/ https://gstreamer.freedesktop.org/security/sa-2023-0010.html
Copyright	Copyright (C) 2023 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.