CVE-2023-34105: SRS has command injection vulnerability in demonstration api-server for HTTP callback.
SRS is a real-time video server supporting RTMP, WebRTC, HLS, HTTP-FLV, SRT, MPEG-DASH, and GB28181. Prior to versions 5.0.157, 5.0-b1, and 6.0.48, SRS's api-server server is vulnerable to a drive-by command injection. An attacker may send a request to the /api/v1/snapshots endpoint containing any commands to be executed as part of the body of the POST request. This issue may lead to Remote Code Execution (RCE). Versions 5.0.157, 5.0-b1, and 6.0.48 contain a fix.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
SRS (api-server)to a version that resolves this vulnerability.Fixed in 5.0.157 - Upgrade
Upgrade
SRS (api-server)to a version that resolves this vulnerability.Fixed in 5.0-b1 - Upgrade
Upgrade
SRS (api-server)to a version that resolves this vulnerability.Fixed in 6.0.48
Event History
Frequently Asked Questions
What is the severity of CVE-2023-34105?
CVE-2023-34105 is classified as a medium severity vulnerability due to the potential for command injection.
How do I fix CVE-2023-34105?
To fix CVE-2023-34105, upgrade to SRS versions 5.0.157, 5.0-b1, or 6.0.48 or later.
What impact does CVE-2023-34105 have on the Simple Realtime Server?
CVE-2023-34105 allows an attacker to perform drive-by command injection through the /api/v1/snapshots endpoint.
Which versions of SRS are affected by CVE-2023-34105?
SRS versions prior to 5.0.157, 5.0-b1, and 6.0.48 are affected by CVE-2023-34105.
Is CVE-2023-34105 exploit related to network access?
Yes, the exploitation of CVE-2023-34105 requires network access to the vulnerable SRS api-server.