Incorrect Access Control in GStreamer RTSP server 1.25.0 in gst-rtsp-server/rtsp-media.c allows remote attackers to cause a denial of service via a series of specially crafted hexstream requests.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade gst-rtsp-server | Aug 8, 2025 | Oct 22, 2024 |
| Debian | — | No solution existsUpgrade gst-rtsp-server1.0 | May 15, 2025 | Oct 22, 2024 |
| Freebsd | — | Upgrade gstreamer1-rtsp-server | Nov 9, 2024 | Nov 7, 2024 |
| Gentoo Linux | — | Upgrade media-libs/gst-plugins-base.Upgrade media-libs/gstreamer. | Jun 13, 2025 | Oct 22, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub