Skip to content
OpenAdvisories

Package · Debian

rtmpdump

5 known vulnerabilities.

5 results · Feed

  • Medium 4.3

    librtmp (RTMPDump) through 2.6 Heap Out-of-Bounds Read via AMFProp_Decode

    librtmp (RTMPDump) through 2.6 contains a heap out-of-bounds read vulnerability in AMFProp_Decode that reads an AMF0 strict-array element count before checking that four bytes remain. A malicious RTMP server or man in the middle can send an AMF0 body ending w…

  • Medium 6.4

    librtmp (RTMPDump) through 2.6 Heap Out-of-Bounds Write via AMF3_Decode

    librtmp in RTMPDump through 2.6 contains an out-of-bounds read and heap out-of-bounds write vulnerability because AMF3_Decode ignores AMF3 property decode failures. Malicious RTMP servers or man-in-the-middle attackers can send oversized AMF3 string lengths, …

  • Unscored —

    RTMPDump 2.4 allows remote attackers to trigger a denial of service (NULL pointer dereference and process crash).

  • Unscored —

    The AMF3ReadString function in amf.c in RTMPDump 2.4 allows remote RTMP Media servers to cause a denial of service (inv…

  • Unscored —

    The AMF3CD_AddProp function in amf.c in RTMPDump 2.4 allows remote RTMP Media servers to execute arbitrary code.