The remote SUSE Linux SLES12 / SLES_SAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:2911-1 advisory.

    - CVE-2022-1920: Fixed integer overflow in WavPack header handling code (bsc#1201688).
    - CVE-2022-1921: Fixed integer overflow resulting in heap corruption in avidemux element (bsc#1201693).
    - CVE-2022-1922: Fixed integer overflows in mkv demuxing (bsc#1201702).
    - CVE-2022-1923: Fixed integer overflows in mkv demuxing using bzip (bsc#1201704).
    - CVE-2022-1924: Fixed integer overflows in mkv demuxing using lzo (bsc#1201706).
    - CVE-2022-1925: Fixed integer overflows in mkv demuxing using HEADERSTRIP (bsc#1201707).
    - CVE-2022-2122: Fixed integer overflows in qtdemux using zlib (bsc#1201708).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:3908-1 advisory.

    - CVE-2022-1920: Fixed integer overflow in WavPack header handling code (bsc#1201688).
    - CVE-2022-1921: Fixed integer overflow resulting in heap corruption in avidemux element (bsc#1201693).
    - CVE-2022-1922: Fixed integer overflows in mkv demuxing (bsc#1201702).
    - CVE-2022-1923: Fixed integer overflows in mkv demuxing using bzip (bsc#1201704).
    - CVE-2022-1924: Fixed integer overflows in mkv demuxing using lzo (bsc#1201706).
    - CVE-2022-1925: Fixed integer overflows in mkv demuxing using HEADERSTRIP (bsc#1201707).
    - CVE-2022-2122: Fixed integer overflows in qtdemux using zlib (bsc#1201708).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:2260 advisory.

    GStreamer is a streaming media framework based on graphs of filters which operate on media data. The     gstreamer1-plugins-good packages contain a collection of well-supported plug-ins of good quality and under     the LGPL license.

    Security Fix(es):

    * gstreamer-plugins-good: Potential heap overwrite in gst_matroska_demux_add_wvpk_header() (CVE-2022-1920)

    * gstreamer-plugins-good: Heap-based buffer overflow in the avi demuxer when handling certain AVI files     (CVE-2022-1921)

    * gstreamer-plugins-good: Potential heap overwrite in mkv demuxing using zlib decompression     (CVE-2022-1922)

    * gstreamer-plugins-good: Potential heap overwrite in mkv demuxing using bz2 decompression (CVE-2022-1923)

    * gstreamer-plugins-good: Potential heap overwrite in mkv demuxing using lzo decompression (CVE-2022-1924)

    * gstreamer-plugins-good: Potential heap overwrite in mkv demuxing using HEADERSTRIP decompression     (CVE-2022-1925)

    * gstreamer-plugins-good: Potential heap overwrite in mp4 demuxing using zlib decompression     (CVE-2022-2122)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.2 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2023-5649:01 advisory.

    * gstreamer-plugins-good: Potential heap overwrite in gst_matroska_demux_add_wvpk_header() (CVE-2022-1920)
      * gstreamer-plugins-good: Heap-based buffer overflow in the avi demuxer when handling certain AVI files     (CVE-2022-1921)
      * gstreamer-plugins-good: Potential heap overwrite in mkv demuxing using zlib decompression     (CVE-2022-1922)
      * gstreamer-plugins-good: Potential heap overwrite in mkv demuxing using bz2 decompression     (CVE-2022-1923)
      * gstreamer-plugins-good: Potential heap overwrite in mkv demuxing using lzo decompression     (CVE-2022-1924)
      * gstreamer-plugins-good: Potential heap overwrite in mkv demuxing using HEADERSTRIP decompression     (CVE-2022-1925)
      * gstreamer-plugins-good: Potential heap overwrite in mp4 demuxing using zlib decompression     (CVE-2022-2122)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - DOS / potential heap overwrite in mkv demuxing using zlib decompression. Integer overflow in matroskademux     element in gst_matroska_decompress_data function which causes a segfault, or could cause a heap overwrite,     depending on libc and OS. Depending on the libc used, and the underlying OS capabilities, it could be just     a segfault or a heap overwrite. If the libc uses mmap for large chunks, and the OS supports mmap, then it     is just a segfault (because the realloc before the integer overflow will use mremap to reduce the size of     the chunk, and it will start to write to unmapped memory). However, if using a libc implementation that     does not use mmap, or if the OS does not support mmap while using libc, then this could result in a heap     overwrite. (CVE-2022-1922)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Published	Updated	Severity
164462	SUSE SLES12 Security Update : gstreamer-plugins-good (SUSE-SU-2022:2911-1)	Nessus	SuSE Local Security Checks	8/27/2022	6/25/2026	high
167208	SUSE SLED15: gstreamer-plugins-good / gstreamer-plugins-good-32bit / etc (SUSE-SU-2022:3908-1)	Nessus	SuSE Local Security Checks	11/9/2022	6/25/2026	high
175482	RHEL 9 : gstreamer1-plugins-good (RHSA-2023:2260)	Nessus	Red Hat Local Security Checks	5/13/2023	11/7/2024	high
292798	MiracleLinux 9 : gstreamer1-plugins-good-1.18.4-6.el9 (AXSA:2023-5649:01)	Nessus	Miracle Linux Local Security Checks	1/20/2026	1/20/2026	high
230038	Linux Distros Unpatched Vulnerability : CVE-2022-1922	Nessus	Misc.	3/5/2025	11/5/2026	high

Detections

Analytics

Plugins Search

high

high

high

high

high