The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5204 advisory.

    Adam Doupe discovered multiple vulnerabilities in the Gstreamer plugins to demux Mastroska and AVI files     which could result in denial of service or the execution of arbitrary code. For the stable distribution     (bullseye), these problems have been fixed in version 1.18.4-2+deb11u1. We recommend that you upgrade your     gst-plugins-good1.0 packages. For the detailed security status of gst-plugins-good1.0 please refer to its     security tracker page at: https://security-tracker.debian.org/tracker/gst-plugins-good1.0

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 / SLES_SAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:2911-1 advisory.

    - CVE-2022-1920: Fixed integer overflow in WavPack header handling code (bsc#1201688).
    - CVE-2022-1921: Fixed integer overflow resulting in heap corruption in avidemux element (bsc#1201693).
    - CVE-2022-1922: Fixed integer overflows in mkv demuxing (bsc#1201702).
    - CVE-2022-1923: Fixed integer overflows in mkv demuxing using bzip (bsc#1201704).
    - CVE-2022-1924: Fixed integer overflows in mkv demuxing using lzo (bsc#1201706).
    - CVE-2022-1925: Fixed integer overflows in mkv demuxing using HEADERSTRIP (bsc#1201707).
    - CVE-2022-2122: Fixed integer overflows in qtdemux using zlib (bsc#1201708).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:3908-1 advisory.

    - CVE-2022-1920: Fixed integer overflow in WavPack header handling code (bsc#1201688).
    - CVE-2022-1921: Fixed integer overflow resulting in heap corruption in avidemux element (bsc#1201693).
    - CVE-2022-1922: Fixed integer overflows in mkv demuxing (bsc#1201702).
    - CVE-2022-1923: Fixed integer overflows in mkv demuxing using bzip (bsc#1201704).
    - CVE-2022-1924: Fixed integer overflows in mkv demuxing using lzo (bsc#1201706).
    - CVE-2022-1925: Fixed integer overflows in mkv demuxing using HEADERSTRIP (bsc#1201707).
    - CVE-2022-2122: Fixed integer overflows in qtdemux using zlib (bsc#1201708).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:2260 advisory.

    GStreamer is a streaming media framework based on graphs of filters which operate on media data. The     gstreamer1-plugins-good packages contain a collection of well-supported plug-ins of good quality and under     the LGPL license.

    Security Fix(es):

    * gstreamer-plugins-good: Potential heap overwrite in gst_matroska_demux_add_wvpk_header() (CVE-2022-1920)

    * gstreamer-plugins-good: Heap-based buffer overflow in the avi demuxer when handling certain AVI files     (CVE-2022-1921)

    * gstreamer-plugins-good: Potential heap overwrite in mkv demuxing using zlib decompression     (CVE-2022-1922)

    * gstreamer-plugins-good: Potential heap overwrite in mkv demuxing using bz2 decompression (CVE-2022-1923)

    * gstreamer-plugins-good: Potential heap overwrite in mkv demuxing using lzo decompression (CVE-2022-1924)

    * gstreamer-plugins-good: Potential heap overwrite in mkv demuxing using HEADERSTRIP decompression     (CVE-2022-1925)

    * gstreamer-plugins-good: Potential heap overwrite in mp4 demuxing using zlib decompression     (CVE-2022-2122)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.2 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2023-5649:01 advisory.

    * gstreamer-plugins-good: Potential heap overwrite in gst_matroska_demux_add_wvpk_header() (CVE-2022-1920)
      * gstreamer-plugins-good: Heap-based buffer overflow in the avi demuxer when handling certain AVI files     (CVE-2022-1921)
      * gstreamer-plugins-good: Potential heap overwrite in mkv demuxing using zlib decompression     (CVE-2022-1922)
      * gstreamer-plugins-good: Potential heap overwrite in mkv demuxing using bz2 decompression     (CVE-2022-1923)
      * gstreamer-plugins-good: Potential heap overwrite in mkv demuxing using lzo decompression     (CVE-2022-1924)
      * gstreamer-plugins-good: Potential heap overwrite in mkv demuxing using HEADERSTRIP decompression     (CVE-2022-1925)
      * gstreamer-plugins-good: Potential heap overwrite in mp4 demuxing using zlib decompression     (CVE-2022-2122)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
163980	Debian DSA-5204-1 : gst-plugins-good1.0 - security update	Nessus	Debian Local Security Checks	8/10/2022	1/24/2025	high
164462	SUSE SLES12 Security Update : gstreamer-plugins-good (SUSE-SU-2022:2911-1)	Nessus	SuSE Local Security Checks	8/27/2022	6/25/2026	high
167208	SUSE SLED15: gstreamer-plugins-good / gstreamer-plugins-good-32bit / etc (SUSE-SU-2022:3908-1)	Nessus	SuSE Local Security Checks	11/9/2022	6/25/2026	high
175482	RHEL 9 : gstreamer1-plugins-good (RHSA-2023:2260)	Nessus	Red Hat Local Security Checks	5/13/2023	11/7/2024	high
292798	MiracleLinux 9 : gstreamer1-plugins-good-1.18.4-6.el9 (AXSA:2023-5649:01)	Nessus	Miracle Linux Local Security Checks	1/20/2026	1/20/2026	high

Detections

Analytics

Plugins Search

high

high

high

high

high