PT-2017-7372

Name of the Vulnerable Software and Affected Versions RTMPDump version 2.4 Description The issue allows remote RTMP Media servers to execute arbitrary code via the AMF3CD AddProp function in amf.c. Recommendations For RTMPDump version 2.4, at the moment, there is no information about a newer...

CVE-2015-8271

The AMF3CDAddProp function in amf.c in RTMPDump 2.4 allows remote RTMP Media servers to execute arbitrary code...

UBUNTU-CVE-2015-8272

RTMPDump 2.4 allows remote attackers to trigger a denial of service NULL pointer dereference and process crash...

CVE-2015-8270

The AMF3ReadString function in amf.c in RTMPDump 2.4 allows remote RTMP Media servers to cause a denial of service invalid pointer dereference and process crash...

GLSA-201702-02 : RTMPDump: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201702-02 RTMPDump: Multiple vulnerabilities Multiple vulnerabilities have been discovered in RTMPDump. The following is a list of vulnerabilities fixed: Additional decode input size checks Ignore zero-length packets Potential...

RTMPDump: Multiple vulnerabilities

Background RTMPDump is an RTMP client intended to stream audio or video flash content Description Multiple vulnerabilities have been discovered in RTMPDump. The following is a list of vulnerabilities fixed: Additional decode input size checks Ignore zero-length packets Potential integer overflow ...

RTMPDump librtmp Denial of Service Vulnerability

RTMPDump is a toolkit for working with RTMP a network protocol used to transmit video and audio data over the Internet. librtmp is one of the libraries that supports the RTMP protocol. RTMPDump version 2.4 has a security vulnerability in the 'AMF3ReadString' function in the amf.c file in librtmp...

RTMPDump librtmp Remote Code Execution Vulnerability

RTMPDump is a toolkit for working with RTMP a network protocol used to transmit video and audio data over the Internet. librtmp is one of the libraries that supports the RTMP protocol. RTMPDump version 2.4 has a security vulnerability in the 'AMF3CDAddProp' function in the amf.c file in librtmp...

MGASA-2016-0004 Updated rtmpdump packages fix security vulnerabilities

The rtmpdump package has been updated to the latest upstream code as of January 1, 2016, fixing several security issues...

Updated rtmpdump packages fix security vulnerabilities

The rtmpdump package has been updated to the latest upstream code as of January 1, 2016, fixing several security issues...

PT-2016-7940

Name of the Vulnerable Software and Affected Versions rtmpdump affected versions not specified Description The issue concerns several security problems that have been fixed by updating the rtmpdump package to the latest upstream code as of January 1, 2016. Recommendations At the moment, there is ...

RTMPDump librtmp AMF3 Class Member Count Remote Code Execution Vulnerability

Talos Vulnerability Report TALOS-2016-0067 RTMPDump librtmp AMF3 Class Member Count Remote Code Execution Vulnerability January 7, 2016 CVE Number CVE-2015-8271 Description The vulnerability occurs within the AMF3CDAddProp function within amf.c. If an attacker sets up a malicious RTMP Media serve...

RTMPDump librtmp AMF3 MemberName Denial of Service Vulnerability

Talos Vulnerability Report TALOS-2016-0066 RTMPDump librtmp AMF3 MemberName Denial of Service Vulnerability January 7, 2016 CVE Number CVE-2015-8270 Description The vulnerability occurs within the AMF3ReadString function within amf.c. If an attacker sets up a malicious RTMP Media server that...

RTMPDump rtmpsrv PlayPath Null Pointer Dereference

Talos Vulnerability Report TALOS-2016-0068 RTMPDump rtmpsrv PlayPath Null Pointer Dereference January 7, 2016 CVE Number CVE-2015-8272 Description A vulnerability exists in rtmpsrv in which an attacker can entice a user to utilize rtmpsrv to save an RTMP media stream that is missing a playpath...

rtmpdump: multiple issues

Several issues have been found in the part of rtmpdump handling RTMP streams by LMX of Qihoo 360 Codesafe Team. These issues include memory leak, integer overflow, type confusion when dealing with AMF strings and objects, and several other parsing issues...

WowzaMediaServer SecureToken bypass (and worse)

Product: Wowza Media Server URL: http://www.wowza.com/ Description: WMS is a quite popular RTMP/HLS/HDS/RTSP streaming server Issue: By default all installations of WMS use four modules in their application's config file: base, properties, logging, flvplayback. I've found out that the properties...