rtmpdump project rtmpdump vulnerabilities

Latest rtmpdump project rtmpdump CVEs

Newest publication first

1. CVE-2015-8272 RTMPDump 2.4 allows remote attackers to trigger a denial of service (NULL pointer dereference and process crash).

   Published 2017-04-13

   Medium·CVSS 6.5 EPSS 2.7%

   RTMPDump 2.4 allows remote attackers to trigger a denial of service (NULL pointer dereference and process crash).

2. CVE-2015-8271 The AMF3CD_AddProp function in amf.c in RTMPDump 2.4 allows remote RTMP Media servers to execute arbitrary code.

   Published 2017-04-13

   Critical·CVSS 9.8 EPSS 5.9%

   The AMF3CD_AddProp function in amf.c in RTMPDump 2.4 allows remote RTMP Media servers to execute arbitrary code.

3. CVE-2015-8270 The AMF3ReadString function in amf.c in RTMPDump 2.4 allows remote RTMP Media servers to cause a denial of service (invalid pointer dereference and process crash).

   Published 2017-04-13

   High·CVSS 7.5 EPSS 3.2%

   The AMF3ReadString function in amf.c in RTMPDump 2.4 allows remote RTMP Media servers to cause a denial of service (invalid pointer dereference and process crash).

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.