| Name | TEMP-0000000-4DAA44 |
| Description | out of bounds reads in ASF demuxer |
| Source | Automatically generated temporary name. Not for external reference. |
Vulnerable and fixed packages
The table below lists information on source packages.
| Source Package | Release | Version | Status |
|---|
| gst-plugins-ugly0.10 (PTS) | jessie, jessie (lts) | 0.10.19-2.1+deb8u1 | vulnerable |
| gst-plugins-ugly1.0 (PTS) | jessie, jessie (lts) | 1.4.4-2+deb8u2 | fixed |
| stretch (security) | 1.10.4-1+deb9u1 | fixed |
| stretch (lts), stretch | 1.10.4-1+deb9u2 | fixed |
| buster (security), buster, buster (lts) | 1.14.4-1+deb10u2 | fixed |
| bullseye (security), bullseye | 1.18.4-2+deb11u1 | fixed |
| bookworm (security), bookworm | 1.22.0-2+deb12u1 | fixed |
| sid, trixie | 1.24.9-1 | fixed |
The information below is based on the following data on fixed versions.
Notes
https://gitlab.freedesktop.org/gstreamer/gst-plugins-ugly/-/issues/37
https://gitlab.freedesktop.org/gstreamer/gst-plugins-ugly/-/commit/3aba7d1e625554b2407bc77b3d09b4928b937d5f (master)
https://gitlab.freedesktop.org/gstreamer/gst-plugins-ugly/-/commit/9726aaf78e6643a5955864f444852423de58de29 (1.18.4)