Huawei Leland-AL00A RTSP Module Denial of Service Vulnerability

Huawei Leland-AL00A is a smartphone from Huawei, China.RTSP module is one of the RTSP Real Time Streaming Protocol modules. A denial of service vulnerability exists in the RTSP module in Huawei Leland-AL00A prior to version 9.1.0.111 C00E111R2P10T8. An attacker can exploit this vulnerability by...

Fedora 30 : webkit2gtk3 (2019-f18fb0f37d)

Fix rendering of emojis copy-pasted from GTK emoji chooser. - Fix space characters not being rendered with some CJK fonts. - Fix adaptive streaming playback with older GStreamer versions. - Set a maximum zoom level for pinch zooming gesture. - Fix navigation gesture to not interfere with...

CVE-2019-11560

A buffer overflow vulnerability in the streaming server provided by hisilicon in HI3516 models allows an unauthenticated attacker to remotely run arbitrary code by sending a special RTSP over HTTP packet. The vulnerability was found in many cameras using hisilicon's hardware and software, as...

CVE-2019-11560

CVE-2019-11560 is a buffer overflow in the HI3516 streaming server (Hisilicon) enabling unauthenticated remote code execution over a crafted RTSP-over-HTTP packet. Affected devices include various cameras from HiSilicon-based implementations (e.g., TENVIS: 1.3.3.3, 1.2.7.2, 1.2.1.4, 7.1.20.1.2, 1...

CVE-2019-11560

A buffer overflow vulnerability in the streaming server provided by hisilicon in HI3516 models allows an unauthenticated attacker to remotely run arbitrary code by sending a special RTSP over HTTP packet. The vulnerability was found in many cameras using hisilicon's hardware and software, as...

Fedora Update for jackson-core FEDORA-2019-df57551f6d

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora Update for icecast FEDORA-2018-b881073c43

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

USN-3967-1: FFmpeg vulnerabilities

It was discovered that FFmpeg contained multiple security issues when handling certain multimedia files. If a user were tricked into opening a crafted multimedia file, an attacker could cause a denial of service via application crash...

Malware Infests Popular Pirate Streaming Hardware

You get what you pay for when you pirate content. That’s the takeaway from the latest report by Digital Citizens Alliance. It found that pirating hardware, which enables free streaming copyright-protected content, comes packed with malicious malware. The devices give criminals easy access to rout...

USN-3958-1 gst-plugins-base0.10, gst-plugins-base1.0 vulnerability

It was discovered that GStreamer Base Plugins did not correctly handle certain malformed RTSP streams. If a user were tricked into opening a crafted RTSP stream with a GStreamer application, an attacker could cause a denial of service via application crash, or possibly execute arbitrary code...

Debian DLA-1770-1 : gst-plugins-base1.0 security update

The RTSP connection parser in the base GStreamer packages version 1.0, which is a streaming media framework, was vulnerable against an heap-based buffer overflow by sending a longer than allowed session id in a response and including a semicolon to change the maximum length. This could result in ...

[SECURITY] [DLA 1769-1] gst-plugins-base0.10 security update

rom: Thorsten Alteholz [email protected] To: [email protected] Subject: SECURITY DLA 1769-1 gst-plugins-base0.10 security update Package : gst-plugins-base0.10 Version : 0.10.36-2+deb8u1 CVE ID : CVE-2019-9928 Debian Bug : The RTSP connection parser in the base GStreamer...

ALPINE-CVE-2019-9928

GStreamer before 1.16.0 has a heap-based buffer overflow in the RTSP connection parser via a crafted response from a server, potentially allowing remote code execution...

CVE-2019-10711

Incorrect access control in the RTSP stream and web portal on all IP cameras based on Hisilicon Hi3510 firmware until Webware version V1.0.1 allows attackers to view an RTSP stream by connecting to the stream with hidden credentials guest or user that are neither displayed nor configurable in the...

Traffic Management for Peace of Mind

Ensure Quality of Experience and Readiness with CDN Capacity Overflow Have you ever planned and launched a system with painstaking detail and, at some point in time, something unexpected breaks the system? An unexpected event might be an unanticipated scenario a bug! or user adoption beyond...

Download Livestream website, the user is not disclosed or regular rows of multicast video-bug warning-the black bar safety net

Recently, I found a Livestream website vulnerabilities, using the vulnerability you can get it any Registered User is not open or regularly discharge the multicast stream of video content. Livestream is a video streaming platform that allows users to use the camera and computer via Internet live...

Citrix Provisioning Console Error: 0x00000057 - Invalid Parameter

Citrix Provisioning does not support VHD based vDisks on 4K storage in any Citrix Provisioning product version. Microsoft's VHD file specification only supports a disk logical sector size of 512 bytes. A read/write access VHD on 4K disk will trigger read-modify-write emulation, which results in...

Design/Logic Flaw

WebKitGTK and WPE WebKit prior to version 2.24.1 failed to properly apply configured HTTP proxy settings when downloading livestream video HLS, DASH, or Smooth Streaming, an error resulting in deanonymization. This issue was corrected by changing the way livestreams are downloaded...

CVE-2019-11070

WebKitGTK and WPE WebKit prior to version 2.24.1 failed to properly apply configured HTTP proxy settings when downloading livestream video HLS, DASH, or Smooth Streaming, an error resulting in deanonymization. This issue was corrected by changing the way livestreams are downloaded...

CVE-2019-11070

WebKitGTK/WebKitGTK4 (webkitgtk4) is affected by CVE-2019-11070. The issue arises from WebKitGTK and WPE WebKit prior to 2.24.1 failing to apply configured HTTP proxy settings when downloading livestream video (HLS/DASH/Smooth Streaming), leading to potential deanonymization. Remediation in the c...