Security Update for rtmpdump
Summary
DLA-917-1: rtmpdump - security update. Affects rtmpdump versions < 2.4+20111222.git4e06e21-1+deb7u1. Fixed in 2.4+20111222.git4e06e21-1+deb7u1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
rtmpdump is a command-line tool for downloading RTMP streams. It includes the librtmp library, which provides support for RTMP streaming protocols. This vulnerability affects rtmpdump version 2.4+20111222.git4e06e21-1+deb7u1 on Debian 7 Wheezy.
Vulnerability Detail
The vulnerability (CVE-2015-8270) in rtmpdump and librtmp allows a malicious server to cause a denial of service by crashing the application. Additionally, another vulnerability (CVE-2015-8271) enables arbitrary code execution when communicating with a malicious attacker. Lastly, rtmpsrv is susceptible to a crash when interacting with a malicious client (CVE-2015-8272). These vulnerabilities can lead to unauthorized access, data loss, or system compromise.
How To Fix
Minimum fixed version
2.4+20111222.git4e06e21-1+deb7u1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade rtmpdumpTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There are no known workarounds for these vulnerabilities.
Conclusion
Upgrading the rtmpdump package to the recommended version will address these vulnerabilities. For further support or assistance with vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for rtmpdump →
FAQ
rtmpdump is a command-line tool used for downloading RTMP streams.
librtmp is a library that provides support for RTMP streaming protocols.
These vulnerabilities can lead to denial of service, arbitrary code execution, unauthorized access, data loss, or system compromise.
The vulnerability affects rtmpdump version 2.4+20111222.git4e06e21-1+deb7u1 on Debian 7 Wheezy.
To fix these vulnerabilities, upgrade the rtmpdump package to version 2.4+20111222.git4e06e21-1+deb7u1 or later using the package manager.
Related vulnerabilities
Recent vulnerabilities recorded for rtmpdump.
