CVE-2020-6095

Name of the Vulnerable Software and Affected Versions GStreamer/gst-rtsp-server version 1.14.5

Description An exploitable denial of service issue exists in the GstRTSPAuth functionality. A specially crafted RTSP setup request can cause a null pointer deference, resulting in denial-of-service. An attacker can send a malicious packet to trigger this issue.

Recommendations For version 1.14.5, consider disabling the GstRTSPAuth functionality as a temporary workaround until a patch is available. Restrict access to the RTSP setup request to minimize the risk of exploitation.