[ GLSA 202009-05 ] GStreamer RTSP Server

[GLSA]

Gentoo Linux Security Advisory

Title: GStreamer RTSP Server: Denial of service (GLSA 202009-05)
Severity: normal
Exploitable: local, remote
Date: 2020-09-13
Bug(s): #715100
ID: 202009-05

Synopsis

A vulnerability in GStreamer RTSP Server could lead to a Denial of
Service condition.


Background

RTSP server library based on GStreamer.

Affected Packages

Package: media-libs/gst-rtsp-server
Vulnerable: < 1.16.2
Unaffected: >= 1.16.2
Architectures: All supported architectures


Description

It was discovered that GStreamer RTSP Server did not properly handle
authentication.


Impact

A remote attacker, by sending specially crafted authentication requests,
could possibly cause a Denial of Service condition.


Workaround

There is no known workaround at this time.

Resolution

All GStreamer RTSP Server users should upgrade to the latest version: