Unknown · Gstreamer Rtsp Server · CVE-2024-44331
**Name of the Vulnerable Software and Affected Versions**
GStreamer RTSP server version 1.25.0
**Description**
The issue is related to incorrect access control in the GStreamer RTSP server, which allows remote attackers to cause a denial of service via a series of specially crafted hexstream requests. This is due to a problem in the gst-rtsp-server/rtsp-media.c file.
**Recommendations**
For GStreamer RTSP server version 1.25.0, consider restricting access to the RTSP server until a patch is available. As a temporary workaround, avoid using the `gst-rtsp-server` module to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.