A NULL pointer dereference flaw was found in GStreamer's RTSP support library. The vulnerability occurs while parsing an Authorization or WWW-Authenticate header that uses Digest authentication. Specially crafted whitespace placement around a parameter's terminator can cause an internal length calculation to underflow, leading to a crash of the process parsing the header. On an RTSP server this can be triggered by a remote, unauthenticated attacker sending a single malformed request when the server has authentication enabled; the same flaw can also be triggered against an RTSP client by a malicious or compromised RTSP server. Successful exploitation results in a denial of service (application crash) and has no confirmed impact on confidentiality or integrity.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Redhat_linux | — | Upgrade gstreamer1-plugins-base-debuginfoUpgrade gstreamer1-plugins-base-debugsourceUpgrade gstreamer1-plugins-base-toolsUpgrade gstreamer1-plugins-base-develUpgrade gstreamer1-plugins-base-tools-debuginfoNo solution existsUpgrade gstreamer1-plugins-base | Sep 7, 2026 | Sep 3, 2026 |
| Rocky_linux | — | Upgrade gstreamer1-plugins-base-tools-debuginfoUpgrade gstreamer1-plugins-base-toolsUpgrade gstreamer1-plugins-baseUpgrade gstreamer1-plugins-base-develUpgrade gstreamer1-plugins-base-debuginfoUpgrade gstreamer1-plugins-base-debugsource | Sep 15, 2026 | Sep 11, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub