7.5
High
CVE-2020-6095 An exploitable denial of service vulnerability exists in the GstRTSPAuth functionality of GStreamer/gst-rtsp-server…
Description
An exploitable denial of service vulnerability exists in the GstRTSPAuth functionality of GStreamer/gst-rtsp-server 1.14.5. A specially crafted RTSP setup request can cause a null pointer deference resulting in denial-of-service. An attacker can send a malicious packet to trigger this vulnerability.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| GStreamer | Versions not published |
References
- openSUSE-SU-2020:0535 lists.opensuse.org
- GLSA-202009-05 security.gentoo.org
- www.talosintelligence.com www.talosintelligence.com
- gitlab.freedesktop.org gitlab.freedesktop.org
Timeline
- Published
- Last modified
Other CVEs of GStreamer
The 10 CVEs of GStreamer →
CVE-2022-1924
DOS / potential heap overwrite in mkv demuxing using lzo decompression
Not rated
CVE-2022-1923
DOS / potential heap overwrite in mkv demuxing using bzip decompression
Not rated
CVE-2022-2122
DOS / potential heap overwrite in qtdemux using zlib decompression
Not rated
CVE-2022-1925
DOS / potential heap overwrite in mkv demuxing using HEADERSTRIP decompression
Not rated