The AMF3ReadString function in amf.c in RTMPDump 2.4 allows remote RTMP Media servers to cause a denial of service (invalid pointer dereference and process crash).
{
"availability": "No subscription required",
"binaries": [
{
"binary_version": "2.4+20121230.gitdf6c518-1ubuntu0.1",
"binary_name": "librtmp-dev"
},
{
"binary_version": "2.4+20121230.gitdf6c518-1ubuntu0.1",
"binary_name": "librtmp0"
},
{
"binary_version": "2.4+20121230.gitdf6c518-1ubuntu0.1",
"binary_name": "rtmpdump"
}
]
}
{
"availability": "No subscription required",
"binaries": [
{
"binary_version": "2.4+20151223.gitfa8646d-1ubuntu0.1",
"binary_name": "librtmp-dev"
},
{
"binary_version": "2.4+20151223.gitfa8646d-1ubuntu0.1",
"binary_name": "librtmp1"
},
{
"binary_version": "2.4+20151223.gitfa8646d-1ubuntu0.1",
"binary_name": "rtmpdump"
}
]
}