What is CVE-2020-6095?

CVE-2020-6095 is an exploitable denial of service vulnerability in the GstRTSPAuth functionality of GStreamer/gst-rtsp-server 1.14.5.

What is the severity of CVE-2020-6095?

The severity of CVE-2020-6095 is high, with a severity value of 7.5.

How does CVE-2020-6095 work?

An attacker can send a specially crafted RTSP setup request, causing a null pointer deference that results in denial-of-service.

Which software versions are affected by CVE-2020-6095?

Gstreamer/gst-rtsp-server 1.14.5, openSUSE Backports SLE 15.0-sp1, and openSUSE Leap 15.1 are affected by CVE-2020-6095.

How can I fix CVE-2020-6095?

Upgrade to a patched version of GStreamer/gst-rtsp-server, apply the necessary security patches, or follow the recommendations provided by the software vendor.

Vulnerability/
CVE-2020-6095

high

7.5

CWE

476 690

27/3/2020

4/8/2024

CVE-2020-6095: Null Pointer Dereference

First published: Fri Mar 27 2020(Updated: )

An exploitable denial of service vulnerability exists in the GstRTSPAuth functionality of GStreamer/gst-rtsp-server 1.14.5. A specially crafted RTSP setup request can cause a null pointer deference resulting in denial-of-service. An attacker can send a malicious packet to trigger this vulnerability.

Credit: talos-cna@cisco.com

Affected Software	Affected Version	How to fix
Gstreamer Project Gst-rtsp-server	=1.14.5
openSUSE Backports SLE	=15.0-sp1
openSUSE Leap	=15.1

Remedy

https://gitlab.freedesktop.org/gstreamer/gst-rtsp-server/-/commit/44ccca3086dd81081d72ca0b21d0ecdde962fb1a

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is CVE-2020-6095?
CVE-2020-6095 is an exploitable denial of service vulnerability in the GstRTSPAuth functionality of GStreamer/gst-rtsp-server 1.14.5.
What is the severity of CVE-2020-6095?
The severity of CVE-2020-6095 is high, with a severity value of 7.5.
How does CVE-2020-6095 work?
An attacker can send a specially crafted RTSP setup request, causing a null pointer deference that results in denial-of-service.
Which software versions are affected by CVE-2020-6095?
Gstreamer/gst-rtsp-server 1.14.5, openSUSE Backports SLE 15.0-sp1, and openSUSE Leap 15.1 are affected by CVE-2020-6095.
How can I fix CVE-2020-6095?
Upgrade to a patched version of GStreamer/gst-rtsp-server, apply the necessary security patches, or follow the recommendations provided by the software vendor.

collector/nvd-index
agent/references
agent/weakness
agent/severity
agent/author
agent/type
agent/event
agent/description
agent/remedy
agent/first-publish-date
agent/softwarecombine
agent/last-modified-date
agent/tags
collector/mitre-cve
source/MITRE
vendor/gstreamer project
canonical/gstreamer project gst-rtsp-server
version/gstreamer project gst-rtsp-server/1.14.5
vendor/opensuse
canonical/opensuse backports sle
version/opensuse backports sle/15.0-sp1
canonical/opensuse leap
version/opensuse leap/15.1

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.