Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 573
Alerts This Week
Warning Icon 1 573

Ubuntu 16.04 LTS USN-3283-1 Critical: rtmpdump Denial of Service

ubuntu
Calendar Grey May 9, 2017
Dist Ubuntu Esm H88
Debian Security Advisory DSA-4543-1 discusses vulnerabilities in libxml2 posing potential issues of remote code execution and information leakage.
rtmpdump could be made to crash or run programs as your login if it processed a specially crafted stream.

Summary

rtmpdump could be made to crash or run programs as your login if it

processed a specially crafted stream.

Software Description:

- rtmpdump: small dumper for media content streamed over the RTMP protocol

Details:

Dave McDaniel discovered that rtmpdump incorrectly handled certain

malformed streams. If a user were tricked into processing a specially

crafted stream, a remote attacker could cause rtmpdump to crash, resulting

in a denial of service, or possibly execute arbitrary code.

Topics%20covered

Topics Covered

security advisory denial of service remote execution ubuntu rtmpdump

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 16.04 LTS:
  librtmp1                        2.4+20151223.gitfa8646d-1ubuntu0.1

Ubuntu 14.04 LTS:
  librtmp0                        2.4+20121230.gitdf6c518-1ubuntu0.1

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-3283-1

CVE-2015-8270, CVE-2015-8271, CVE-2015-8272

Severity
critical
Lowest
Low
Medium
High
Critical

May 09, 2017

Topics%20covered

Topics Covered

security advisory denial of service remote execution ubuntu rtmpdump

Package Information

https://launchpad.net/ubuntu/+source/rtmpdump/2.4+20151223.gitfa8646d-1ubuntu0.1
https://launchpad.net/ubuntu/+source/rtmpdump/2.4+20121230.gitdf6c518-1ubuntu0.1

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.