BSD Portsgstreamer1-rtsp-server -- Potential Denial-of-Service (DoS) with specially crafted client requests
· CVE-2024-44331 · VuXML entry
Qingpeng Du reports: A series of specially crafted client requests during streaming setup (post client authentication, if any) can cause the RTSP server library to abort, if it has been compiled with assertions enabled.
Affected versions
- gstreamer1-rtsp-server >= 1.18.0 < 1.24.9
By system
0 still vulnerable, 2 fixed. Where VuXML applies (FreeBSD, DragonFly, FreeBSD's derivatives) a port is vulnerable while its version is in a range; pkgsrc says itself whether it lists a CVE of this advisory; OpenBSD and MidnightBSD keep no list this site reads, so their row is only an estimate: FreeBSD's ranges applied to upstream's version.
| System | Port | Version | State | Fixed |
|---|---|---|---|---|
| DragonFly | multimedia/gstreamer1-rtsp-server | 1.26.0 | fixed | |
| MidnightBSD | multimedia/gstreamer1-rtsp-server | ${_GST_VERSION} | out of range, by version | |
| FreeBSD | multimedia/gstreamer1-rtsp-server | 1.28.8 | fixed |