Stay Secure with the Latest Linux Advisories

security advisorycode executionmemory corruption

Mageia 7: 2021-0079 Critical: Gstreamer Code Execution Risk

A flaw was found in the gstreamer h264 component of gst-plugins-bad before v1.18.1 where when parsing a h264 header, an attacker could cause the stack to be smashed, memory corruption and possibly code execution. (CVE-2021-3185). References: . MGASA-2021-0079 - Updated gstreamer1.0-plugins-bad packages fix security vulnerability Publication date: 10 Feb 2021 URL: https://advisories.mageia.org/MGASA-2021-0079.html Type: security Affected Mageia releases: 7 CVE: CVE-2021-3185 A flaw was found in the gstreamer h264 component of gst-plugins-bad before v1.18.1 where when parsing a h264 header, an attacker could cause the stack to be smashed, memory corruption and possibly code execution. (CVE-2021-3185). References: - https://bugs.mageia.org/show_bug.cgi?id=28174 - https://lists.debian.org/debian-security-announce/2021/msg00012.html - https://bugzilla.redhat.com/show_bug.cgi?id=1917192 - https://seclists.org/oss-sec/2021/q1/59 - https://www.cve.org/CVERecord?id=CVE-2021-3185 SRPMS: - 7/core/gstreamer1.0-plugins-bad-1.16.0-1.1.mga7 - 7/tainted/gstreamer1.0-plugins-bad-1.16.0-1.1.mga7.tainted . Mageia 2021-0080 resolves a critical vulnerability in ffmpeg that could allow arbitrary command execution. Ensure your system is updated promptly!. gstreamer Update, Mageia 7, security fix, h264 issue. . Severity: Critical. LinuxSecurity.com Team

Feb 10, 2021 •Critical Mageia