The AMF3ReadString function in amf.c in RTMPDump 2.4 allows remote RTMP Media servers to cause a denial of service (invalid pointer dereference and process crash).
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "2.4+20121230.gitdf6c518-1ubuntu0.1", "binary_name": "librtmp-dev" }, { "binary_version": "2.4+20121230.gitdf6c518-1ubuntu0.1", "binary_name": "librtmp0" }, { "binary_version": "2.4+20121230.gitdf6c518-1ubuntu0.1", "binary_name": "rtmpdump" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "2.4+20151223.gitfa8646d-1ubuntu0.1", "binary_name": "librtmp-dev" }, { "binary_version": "2.4+20151223.gitfa8646d-1ubuntu0.1", "binary_name": "librtmp1" }, { "binary_version": "2.4+20151223.gitfa8646d-1ubuntu0.1", "binary_name": "librtmp1-dbgsym" }, { "binary_version": "2.4+20151223.gitfa8646d-1ubuntu0.1", "binary_name": "rtmpdump" }, { "binary_version": "2.4+20151223.gitfa8646d-1ubuntu0.1", "binary_name": "rtmpdump-dbgsym" } ] }