CVE-2020-6095

An exploitable denial of service vulnerability exists in the GstRTSPAuth functionality of GStreamer/gst-rtsp-server 1.14.5. A specially crafted RTSP setup request can cause a null pointer deference resulting in denial-of-service. An attacker can send a malicious packet to trigger this vulnerability.

References

Affected packages

Git / github.com/gstreamer/gst-rtsp-server

Affected ranges

Type

GIT

Repo

https://github.com/gstreamer/gst-rtsp-server

Events

Introduced

Last affected

1ad54eecfdf634ab6eb672c81df1602d004d75b8

Database specific

{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.14.5"
        }
    ]
}

Type: GIT
Repo: https://gitlab.freedesktop.org/gstreamer/gst-rtsp-server
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Fixed

44ccca3086dd81081d72ca0b21d0ecdde962fb1a

Affected versions

1.*

1.10.0

1.11.0

1.11.1

1.11.2

1.11.90

1.11.91

1.12.0

1.13.1

1.13.90

1.13.91

1.14.0

1.14.1

1.14.2

1.14.3

1.14.4

1.14.5

1.15.1

1.15.2

1.15.90

1.16.0

1.3.1

1.3.2

1.3.3

1.3.90

1.3.91

1.4.0

1.5.1

1.5.2

1.5.90

1.5.91

1.6.0

1.7.1

1.7.2

1.7.90

1.7.91

1.8.0

1.9.1

1.9.2

1.9.90

Other

CHANGELOG_START

RELEASE-0.*

RELEASE-0.10.1

RELEASE-0.10.2

RELEASE-0.10.3

RELEASE-0.10.4

RELEASE-0.10.5

RELEASE-0.10.6

RELEASE-0.10.7

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-6095.json"

vanir_signatures_modified

"2026-04-11T16:25:28Z"

unresolved_ranges

[
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "15.0-sp1"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "15.1"
            }
        ]
    }
]

vanir_signatures

[
    {
        "signature_version": "v1",
        "signature_type": "Function",
        "source": "https://gitlab.freedesktop.org/gstreamer/gst-rtsp-server@44ccca3086dd81081d72ca0b21d0ecdde962fb1a",
        "digest": {
            "function_hash": "321621454934023608561527569629519791371",
            "length": 974.0
        },
        "id": "CVE-2020-6095-4e4940d4",
        "deprecated": false,
        "target": {
            "file": "gst/rtsp-server/rtsp-auth.c",
            "function": "default_authenticate"
        }
    },
    {
        "signature_version": "v1",
        "signature_type": "Line",
        "source": "https://gitlab.freedesktop.org/gstreamer/gst-rtsp-server@44ccca3086dd81081d72ca0b21d0ecdde962fb1a",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "69347512028647998947647989890702729393",
                "169785759834100554059797340295832875417",
                "232724341315295775364387316451114592560",
                "243056517678594786714431000077397043096"
            ]
        },
        "id": "CVE-2020-6095-c132ca9b",
        "deprecated": false,
        "target": {
            "file": "gst/rtsp-server/rtsp-auth.c"
        }
    }
]