DOS / potential heap overwrite in mkv demuxing using HEADERSTRIP decompression. Integer overflow in matroskaparse element in gstmatroskadecompress_data function which causes a heap overflow. Due to restrictions on chunk sizes in the matroskademux element, the overflow can't be triggered, however the matroskaparse element has no size checks.
{ "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro", "ubuntu_priority": "medium", "binaries": [ { "gstreamer1.0-plugins-good-dbgsym": "1.8.3-1ubuntu0.5+esm1", "libgstreamer-plugins-good1.0-dev-dbgsym": "1.8.3-1ubuntu0.5+esm1", "gstreamer1.0-plugins-good-doc": "1.8.3-1ubuntu0.5+esm1", "libgstreamer-plugins-good1.0-dev": "1.8.3-1ubuntu0.5+esm1", "libgstreamer-plugins-good1.0-0": "1.8.3-1ubuntu0.5+esm1", "gstreamer1.0-plugins-good": "1.8.3-1ubuntu0.5+esm1", "gstreamer1.0-pulseaudio-dbgsym": "1.8.3-1ubuntu0.5+esm1", "libgstreamer-plugins-good1.0-0-dbgsym": "1.8.3-1ubuntu0.5+esm1", "gstreamer1.0-pulseaudio": "1.8.3-1ubuntu0.5+esm1", "gstreamer1.0-plugins-good-dbg": "1.8.3-1ubuntu0.5+esm1" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "libgstreamer-plugins-good1.0-0": "1.14.5-0ubuntu1~18.04.3", "libgstreamer-plugins-good1.0-dev": "1.14.5-0ubuntu1~18.04.3", "gstreamer1.0-plugins-good-doc": "1.14.5-0ubuntu1~18.04.3", "gstreamer1.0-plugins-good": "1.14.5-0ubuntu1~18.04.3", "gstreamer1.0-gtk3": "1.14.5-0ubuntu1~18.04.3", "gstreamer1.0-pulseaudio": "1.14.5-0ubuntu1~18.04.3", "gstreamer1.0-qt5": "1.14.5-0ubuntu1~18.04.3", "gstreamer1.0-plugins-good-dbg": "1.14.5-0ubuntu1~18.04.3" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "libgstreamer-plugins-good1.0-0": "1.16.3-0ubuntu1.1", "libgstreamer-plugins-good1.0-dev": "1.16.3-0ubuntu1.1", "gstreamer1.0-plugins-good-doc": "1.16.3-0ubuntu1.1", "gstreamer1.0-plugins-good": "1.16.3-0ubuntu1.1", "gstreamer1.0-gtk3": "1.16.3-0ubuntu1.1", "gstreamer1.0-pulseaudio": "1.16.3-0ubuntu1.1", "gstreamer1.0-qt5": "1.16.3-0ubuntu1.1", "gstreamer1.0-plugins-good-dbg": "1.16.3-0ubuntu1.1" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "gstreamer1.0-plugins-good-dbgsym": "1.20.3-0ubuntu1", "libgstreamer-plugins-good1.0-0": "1.20.3-0ubuntu1", "libgstreamer-plugins-good1.0-dev": "1.20.3-0ubuntu1", "gstreamer1.0-gtk3-dbgsym": "1.20.3-0ubuntu1", "gstreamer1.0-plugins-good": "1.20.3-0ubuntu1", "libgstreamer-plugins-good1.0-0-dbgsym": "1.20.3-0ubuntu1", "gstreamer1.0-gtk3": "1.20.3-0ubuntu1", "gstreamer1.0-pulseaudio": "1.20.3-0ubuntu1", "gstreamer1.0-qt5": "1.20.3-0ubuntu1", "gstreamer1.0-qt5-dbgsym": "1.20.3-0ubuntu1" } ] }