CVE-2024-44331: High severity GStreamer RTSP Server vulnerability
Incorrect Access Control in GStreamer RTSP server 1.25.0 in gst-rtsp-server/rtsp-media.c allows remote attackers to cause a denial of service via a series of specially crafted hexstream requests.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/gst-rtsp-server1.0to a version that resolves this vulnerability.Fixed in 1.24.9-1 - Upgrade
Upgrade
debian/gst-rtsp-server1.0to a version that resolves this vulnerability.Fixed in 1.26.2-1Fixed in 1.28.8-1 - Upgrade
Upgrade
alpine/gst-rtsp-serverto a version that resolves this vulnerability.Fixed in 1.24.9-r0
Event History
Frequently Asked Questions
What is the severity of CVE-2024-44331?
CVE-2024-44331 is classified as a high-severity vulnerability due to its potential for remote denial of service.
How do I fix CVE-2024-44331?
To mitigate CVE-2024-44331, update the GStreamer RTSP server to the latest version where the vulnerability has been addressed.
What kind of attacks can be executed using CVE-2024-44331?
Attackers can exploit CVE-2024-44331 by sending specially crafted hexstream requests to the GStreamer RTSP server, leading to a denial of service.
Which versions of GStreamer RTSP server are affected by CVE-2024-44331?
CVE-2024-44331 specifically affects GStreamer RTSP server version 1.25.0.
Is CVE-2024-44331 easy to exploit?
Yes, CVE-2024-44331 can be easily exploited by remote attackers with minimal technical skills by sending malicious requests.