portage-ng / portage / media-libs / gst-rtsp-server / 1.26.11
portage-ng glsa
1 advisory reference media-libs/gst-rtsp-server · none place version 1.26.11 in a vulnerable range
▸ GLSA 202009-05 GStreamer RTSP Server: Denial of service this version unaffected normal local, remote 2020-09-13

A vulnerability in GStreamer RTSP Server could lead to a Denial of Service condition.

Announced
2020-09-13
Revised
2020-09-13
Access
local, remote
Bugs
#715100
Advisory
https://security.gentoo.org/glsa/202009-05

Affected packages

PackageArchVulnerableUnaffected
media-libs/gst-rtsp-server*< 1.16.2>= 1.16.2

Background

RTSP server library based on GStreamer.

Description

It was discovered that GStreamer RTSP Server did not properly handle authentication.

Impact

A remote attacker, by sending specially crafted authentication requests, could possibly cause a Denial of Service condition.

Workaround

There is no known workaround at this time.

Resolution

All GStreamer RTSP Server users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose
">=media-libs/gst-rtsp-server-1.16.2"

References