PT-2017-7372 · Rtmpdump+1 · Rtmpdump+1

Dave Mcdaniel · Published 2017-04-13 · Updated 2017-11-04 · CVE-2015-8271

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions RTMPDump version 2.4

Description The issue allows remote RTMP Media servers to execute arbitrary code via the AMF3CD AddProp function in amf.c.

Recommendations For RTMPDump version 2.4, at the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Fix

Weakness Enumeration

CWE-123

Related Identifiers

CVE-2015-8271

DLA-917-1

DSA-3850-1

USN-3283-1

USN-3283-2

Affected Products

Rtmpdump

Ubuntu

References · 24

• 🔥 http://talosintelligence.com/reports/TALOS-2016-0067 · Exploit
• https://ubuntu.com/security/notices/USN-3283-2 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2015-8271 · Vendor Advisory
• https://ubuntu.com/security/CVE-2015-8270 · Vendor Advisory
• https://osv.dev/vulnerability/USN-3283-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2015-8271 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2015-8271 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8271 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8270 · Security Note
• https://osv.dev/vulnerability/DSA-3850-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2015-8272 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2015-8271 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-3283-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2015-8271 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2015-8271 · Vendor Advisory