GHSL-2024-115: GStreamer has a stack-buffer overflow in vorbis_handle_identification_packet
概要
GHSL-2024-115: GStreamer has a stack-buffer overflow in vorbis_handle_identification_packet
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
GStreamer is a library for constructing graphs of media-handling components. A stack-buffer overflow has been detected in the vorbis_handle_identification_packet function within gstvorbisdec.c. The position array is a stack-allocated buffer of size 64. If vd->vi.channels exceeds 64, the for loop will write beyond the boundaries of the position array. The value written will always be GST_AUDIO_CHANNEL_POSITION_NONE. This vulnerability allows someone to overwrite the EIP address allocated in the stack. Additionally, this bug can overwrite the GstAudioInfo info structure. This vulnerability is fixed in 1.24.10.
ディストリビューション別の修正状況
各ディストリビューションが公開している、この CVE の修正パッケージ
- Alpine Linux ALPINE-CVE-2024-47538 gst-plugins-base 修正版: 1.24.10-r0
- Debian DEBIAN-CVE-2024-47538 gst-plugins-base1.0 修正版: 1.18.4-2+deb11u3
- Ubuntu UBUNTU-CVE-2024-47538 gst-plugins-base0.10
参照URL
- advisory github.com
- advisory nvd.nist.gov
- advisory securitylab.github.com
- patch gitlab.freedesktop.org
- web gstreamer.freedesktop.org
- web lists.debian.org