PT-2023-32799 · Unknown · Phz76 Rtspserver

·

CVE-2023-6888

·

Publicado

2023-12-17

·

Atualizado

2024-05-17

CVSS v2.0

7.5

Alta

VetorAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions PHZ76 RtspServer version 1.0.0
Description A critical issue was found in the ParseRequestLine function of the RtspMesaage.cpp file, leading to a stack-based buffer overflow. This issue can be exploited remotely. The exploit has been disclosed publicly. The vendor was contacted about this issue but did not respond.
Recommendations For PHZ76 RtspServer version 1.0.0, as a temporary workaround, consider disabling the ParseRequestLine function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Correção

Memory Corruption

Stack Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

CVE-2023-6888

Produtos afetados

Phz76 Rtspserver