Logo
vulnerabilityCVE-2024-44331
Name
CVE-2024-44331
Source
NVD ( link)Debian ( link)
Description
Incorrect Access Control in GStreamer RTSP server 1.25.0 in gst-rtsp-server/rtsp-media.c allows remote attackers to cause a denial of service via a series of specially crafted hexstream requests.
Published Date
Updated Date
Workaround
-
Advisories

Analysis#


Affected Component
Analysis
gstreamer1.0-rtsp-server
Patched

Vulnerability Ratings#


7.5
CVSSv31
NaN
other

Others affected components#


Name
Project
Project Version
Version
Status
buildroot
2025.02.x
1.24.13
Not Affected
buildroot
master
1.24.13
Not Affected
yocto
master
1.28.4
Not Affected
yocto
scarthgap
1.22.12
Patched

Resolved with patches#


gstreamer1.0-rtsp-server (yocto:kirkstone)

#
Title
Author
Resolve
1
rtsp-server: Remove pointless assertions that can happen if
=?UTF-8?q?Sebastian=20Dr=C3=B6ge?= <sebastian@centricular.com>
CVE-2024-44331

gstreamer1.0-rtsp-server (yocto:scarthgap)

#
Title
Author
Resolve
1
rtsp-server: Remove pointless assertions that can happen if
=?UTF-8?q?Sebastian=20Dr=C3=B6ge?= <sebastian@centricular.com>
CVE-2024-44331