GStreamer project records
2 published records for vendor GStreamer project.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 100%
- Median publish → KEV
- No record has entered KEV
Pre-auth RCE: flaws that let an attacker run code over the network without an account. Median publish → KEV: the typical time between a record being published and CISA listing it as exploited.
Recurring classes
- CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')1
- CWE-690 Unchecked Return Value to NULL Pointer Dereference1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
2 records| Action | CVE | Vulnerability | Severity | EPSS · Published |
|---|---|---|---|---|
31Monitor | CVE-2020-6095No exploit | An exploitable denial of service vulnerability exists in the GstRTSPAuth functionality of GStreamer/gst-rtsp-server 1.14.5.gstreamer project · gst-rtsp-server · CWE-690 | High7.5 | 2.9%Mar 27, 2020 |
30Monitor | CVE-2024-44331No exploit | Incorrect Access Control in GStreamer RTSP server 1.25.0 in gst-rtsp-server/rtsp-media.c allows remote attackers to cause a denial of servicCWE-120 | High7.5 | 0.6%Oct 22, 2024 |
- CVE-2020-609531Monitor
An exploitable denial of service vulnerability exists in the GstRTSPAuth functionality of GStreamer/gst-rtsp-server 1.14.5.
HighCVSS 7.5No exploitEPSS 2%gstreamer project · gst-rtsp-serverMar 27, 2020
- CVE-2024-4433130Monitor
Incorrect Access Control in GStreamer RTSP server 1.25.0 in gst-rtsp-server/rtsp-media.c allows remote attackers to cause a denial of servic
HighCVSS 7.5No exploitEPSS 0%Oct 22, 2024