The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:02020-1 advisory.

    - CVE-2024-47538: Fixed stack-buffer overflow in vorbis_handle_identification_packet (bnc#1234415)
    - CVE-2024-47600: Fixed out-of-bounds read in gst-discoverer-1.0 commandline tool (bnc#1234453)
    - CVE-2024-47615: Fixed out-of-bounds write in Ogg demuxer (bnc#1234456)
    - CVE-2024-47542: Fixed ID3v2 parser out-of-bounds read and NULL-pointer dereference (bnc#1234460)
    - CVE-2024-47607: Fixed stack buffer-overflow in Opus decoder (bnc#1234455)
    - CVE-2024-47835: Fixed NULL-pointer dereference in LRC subtitle parser (bnc#1234450)
    - CVE-2024-47541: Fixed out-of-bounds write in SSA subtitle parser (bnc#1234459)
    - CVE-2025-47808: Fixed NULL-pointer dereference in TMPlayer subtitle parser (boo#1244404)
    - CVE-2025-47807: Fixed NULL-pointer dereference in SubRip subtitle parser (boo#1244403)
    - CVE-2025-47806: Fixed Stack buffer overflow in SubRip subtitle parser (boo#1244407)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:11143 advisory.

    GStreamer is a streaming media framework based on graphs of filters which operate on media data. The     gstreamer1-plugins-base packages contain a collection of well-maintained base plug-ins.

    Security Fix(es):

    * gstreamer1-plugins-base: GStreamer has a stack-buffer overflow in vorbis_handle_identification_packet     (CVE-2024-47538)

    * gstreamer1-plugins-base: out-of-bounds write in Ogg demuxer (CVE-2024-47615)

    * gstreamer1-plugins-base: stack-buffer overflow in gst_opus_dec_parse_header (CVE-2024-47607)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:0052-1 advisory.

    - CVE-2024-47538: Fixed a stack-buffer overflow in vorbis_handle_identification_packet. (bsc#1234415)
    - CVE-2024-47835: Fixed a NULL-pointer dereference in LRC subtitle parser. (bsc#1234450)
    - CVE-2024-47615: Fixed an out-of-bounds write in Ogg demuxer. (bsc#1234456)
    - CVE-2024-47541: Fixed an out-of-bounds write in SSA subtitle parser. (bsc#1234459)
    - CVE-2024-47542: Fixed an ID3v2 parser out-of-bounds read and NULL-pointer dereference. (bsc#1234460)
    - CVE-2024-47613: Fixed a NULL-pointer dereference in gdk-pixbuf decoder. (boo#1234447)
    - CVE-2024-47607: Fixed a stack buffer-overflow in Opus decoder. (bsc#1234455)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of gstreamer1-plugins-base installed on the remote host is prior to 1.18.4-5. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2025-2747 advisory.

    GStreamer EXIF Metadata Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability     allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with     this library is required to exploit this vulnerability but attack vectors may vary depending on the     implementation.

    The specific flaw exists within the parsing of EXIF metadata. The issue results from the lack of proper     validation of user-supplied data, which can result in an integer overflow before allocating a buffer. An     attacker can leverage this vulnerability to execute code in the context of the current process.. Was ZDI-     CAN-23896. (CVE-2024-4453)

    GStreamer is a library for constructing graphs of media-handling components. A stack-buffer overflow has     been detected in the `vorbis_handle_identification_packet` function within `gstvorbisdec.c`. The position     array is a stack-allocated buffer of size 64. If vd->vi.channels exceeds 64, the for loop will write     beyond the boundaries of the position array. The value written will always be     `GST_AUDIO_CHANNEL_POSITION_NONE`. This vulnerability allows someone to overwrite the EIP address     allocated in the stack. Additionally, this bug can overwrite the `GstAudioInfo` info structure. This     vulnerability is fixed in 1.24.10. (CVE-2024-47538)

    GStreamer is a library for constructing graphs of media-handling components.  stack-buffer overflow has     been detected in the gst_opus_dec_parse_header function within `gstopusdec.c'. The pos array is a stack-     allocated buffer of size 64. If n_channels exceeds 64, the for loop will write beyond the boundaries of     the pos array. The value written will always be GST_AUDIO_CHANNEL_POSITION_NONE. This bug allows to     overwrite the EIP address allocated in the stack. This vulnerability is fixed in 1.24.10. (CVE-2024-47607)

    GStreamer is a library for constructing graphs of media-handling components. An OOB-Write has been     detected in the function gst_parse_vorbis_setup_packet within vorbis_parse.c. The integer size is read     from the input file without proper validation. As a result, size can exceed the fixed size of the     pad->vorbis_mode_sizes array (which size is 256). When this happens, the for loop overwrites the entire     pad structure with 0s and 1s, affecting adjacent memory as well. This OOB-write can overwrite up to 380     bytes of memory beyond the boundaries of the pad->vorbis_mode_sizes array. This vulnerability is fixed in     1.24.10. (CVE-2024-47615)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
240770	SUSE SLES15 Security Update : gstreamer-plugins-base (SUSE-SU-2025:02020-1)	Nessus	SuSE Local Security Checks	6/27/2025	6/27/2025	high
213104	RHEL 8 : gstreamer1-plugins-base (RHSA-2024:11143)	Nessus	Red Hat Local Security Checks	12/18/2024	5/5/2025	high
213694	SUSE SLES12 Security Update : gstreamer-plugins-base (SUSE-SU-2025:0052-1)	Nessus	SuSE Local Security Checks	1/10/2025	1/10/2025	high
214971	Amazon Linux 2 : gstreamer1-plugins-base (ALAS-2025-2747)	Nessus	Amazon Linux Local Security Checks	2/4/2025	2/4/2025	high

Detections

Analytics

Plugins Search

high

high

high

high