buffer overflow, null pointer deref in nginx rtmp module
Bug #1977718 reported by
Sven Neuhaus
This bug affects 1 person
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
nginx (Ubuntu) |
Fix Released
|
Undecided
|
Unassigned | ||
Focal |
Fix Released
|
Undecided
|
Thomas Ward | ||
Jammy |
Fix Released
|
Undecided
|
Thomas Ward |
Bug Description
The relevant package name is libnginx-mod-rtmp.
There is a fix for a buffer overrun in the nginx RTMP module:
https:/
It should be applied to this package.
You should also fix the null pointer dereference as done with this commit
https:/
Changed in nginx (Ubuntu): | |
status: | New → Confirmed |
Changed in nginx (Ubuntu Focal): | |
status: | New → Confirmed |
Changed in nginx (Ubuntu Jammy): | |
status: | New → Confirmed |
Changed in nginx (Ubuntu): | |
status: | Confirmed → Fix Released |
Changed in nginx (Ubuntu Focal): | |
assignee: | nobody → Thomas Ward (teward) |
Changed in nginx (Ubuntu Jammy): | |
assignee: | nobody → Thomas Ward (teward) |
summary: |
- buffer overflow in nginx rtmp module + buffer overflow, null pointer deref in nginx rtmp module |
To post a comment you must log in.
Thanks for the report. Have CVEs been assigned for either of these issues?
Given that the commits are public, I'm opening this bug up as public as well.