PT-2023-32799 · Unknown · Phz76 Rtspserver

·

CVE-2023-6888

·

Published

2023-12-17

·

Updated

2024-05-17

CVSS v2.0

7.5

High

VectorAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions PHZ76 RtspServer version 1.0.0
Description A critical issue was found in the ParseRequestLine function of the RtspMesaage.cpp file, leading to a stack-based buffer overflow. This issue can be exploited remotely. The exploit has been disclosed publicly. The vendor was contacted about this issue but did not respond.
Recommendations For PHZ76 RtspServer version 1.0.0, as a temporary workaround, consider disabling the ParseRequestLine function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Fix

Memory Corruption

Stack Overflow

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2023-6888

Affected Products

Phz76 Rtspserver