CVE-2015-8270

High

Published: 13/04/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

The AMF3ReadString function in amf.c in RTMPDump 2.4 allows remote RTMP Media servers to cause a denial of service through invalid pointer dereference, leading to process crash.

Risk Assessment

The organization may experience service outages related to RTMP, affecting users and business operations.

Recommendation

It is recommended to update RTMPDump to the latest version to mitigate this vulnerability and to monitor systems for unauthorized access attempts.

Other vulnerabilities in RTMPDump 2.4

CVE-2015-8271Critical
The AMF3CD_AddProp function in amf.c in RTMPDump 2.4 allows remote RTMP Media servers to execute arbitrary code.

Original NVD description (English source)

The AMF3ReadString function in amf.c in RTMPDump 2.4 allows remote RTMP Media servers to cause a denial of service (invalid pointer dereference and process crash).