CVE-2020-6095CWE-690

An exploitable denial of service vulnerability exists in the GstRTSPAuth functionality of GStreamer/gst-rtsp-server 1.14.5

High · published March 27, 2020

CVSS v3.0
7.5
EPSS
3%
Percentile
87.0
In the wild
Unconfirmed
What it is

An exploitable denial of service vulnerability exists in the GstRTSPAuth functionality of GStreamer/gst-rtsp-server 1.14.5. A specially crafted RTSP setup request can cause a null pointer deference resulting in denial-of-service. An attacker can send a malicious packet to trigger this vulnerability.

The record
Technical detail
CVSS v3.0
7.5 · HIGH
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.02944 · 87.0th percentile
Weakness
CWE-690 · Unchecked Return Value to NULL Pointer Dereference
Published
2020-03-27T19:20Z
EPSS history
Timeline
  • 27 MAR 19:20Z
    An exploitable denial of service vulnerability exists in the GstRTSPAuth functionality of GStreamer/gst-rtsp-server 1.14.5
    cvelistv5