Stay Secure with the Latest Linux Advisories

security advisorydenial of servicecode execution

Debian 7 Wheezy DLA-917-1 Moderate: RTMPDump Multiple Threats

Several vulnerabilities were found in rtmpdump and the librtmp library. CVE-2015-8270 . Hash: SHA256 Package : rtmpdump Version : 2.4+20111222.git4e06e21-1+deb7u1 CVE ID : CVE-2015-8270 CVE-2015-8271 CVE-2015-8272 Several vulnerabilities were found in rtmpdump and the librtmp library. CVE-2015-8270 A bug in AMF3ReadString in librtmp can cause a denial of service via application crash to librtmp users that talk to a malicious server. CVE-2015-8271 The AMF3_Decode function in librtmp doesn't properly validate its input, which can lead to arbitrary code execution when talking to a malicious attacker. CVE-2015-8272 A bug in rtmpsrv can lead to a crash when talking to a malicious client. For Debian 7 "Wheezy", these problems have been fixed in version 2.4+20111222.git4e06e21-1+deb7u1. We recommend that you upgrade your rtmpdump packages. Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS . Update rtmpdump to address various security flaws that may result in denial-of-service attacks or permit execution of arbitrary code.. Debian Security Update, RTMPDump Exploits, Library Threats, DoS Risks. . Severity: Important. LinuxSecurity.com Team

Apr 26, 2017 •Important Debian LTS