Bug 2254540 (CVE-2023-37328, GStreamer-SA-2023-0002, ZDI-CAN-20968) - CVE-2023-37328 gstreamer-plugins-base: heap overwrite in subtitle parsing
Summary: CVE-2023-37328 gstreamer-plugins-base: heap overwrite in subtitle parsing
Keywords:
Status: NEW
Alias: CVE-2023-37328, GStreamer-SA-2023-0002, ZDI-CAN-20968
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Product Security
QA Contact:
URL:
Whiteboard:
Depends On: 2254681 2254682
Blocks: 2254548
TreeView+ depends on / blocked
 
Reported: 2023-12-14 12:18 UTC by TEJ RATHI
Modified: 2024-05-22 09:44 UTC (History)
0 users

Fixed In Version: gst-plugins-base 1.22.4, gst-plugins-base 1.20.7
Doc Type: ---
Doc Text:
A heap-based buffer overflow was found in the subparse subtitle parser of GStreamer when processing specific SRT subtitle files. This issue could allow a malicious third party to crash the application and execute code through manipulation of the heap.
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Product Errata RHSA-2024:2302 0 None None None 2024-04-30 10:03:03 UTC
Red Hat Product Errata RHSA-2024:3088 0 None None None 2024-05-22 09:44:39 UTC

Description TEJ RATHI 2023-12-14 12:18:41 UTC 
Heap-based buffer overflow in the subparse subtitle parser when handling certain SRT subtitle files in GStreamer versions before 1.22.4 / 1.20.7. It is possible for a malicious third party to trigger a crash in the application, and possibly also effect code execution through heap manipulation.

https://gstreamer.freedesktop.org/security/sa-2023-0002.html
Comment 2 TEJ RATHI 2023-12-14 13:08:12 UTC 
Upstream Commits:

https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/4895.patch
https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/518ecba8f960137715f776dac6c93e4c4e4179d1
https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/1d9b360708115d4acc3fd4bf13cde066391ed057
Comment 3 Sandipan Roy 2023-12-15 05:42:58 UTC 
Created gstreamer1-plugins-base tracking bugs for this issue:

Affects: fedora-all [bug 2254681]


Created mingw-gstreamer1-plugins-base tracking bugs for this issue:

Affects: fedora-all [bug 2254682]
Comment 4 errata-xmlrpc 2024-04-30 10:03:02 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9

Via RHSA-2024:2302 https://access.redhat.com/errata/RHSA-2024:2302
Comment 5 errata-xmlrpc 2024-05-22 09:44:39 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8

Via RHSA-2024:3088 https://access.redhat.com/errata/RHSA-2024:3088
Note You need to log in before you can comment on or make changes to this bug.