GNU Gatekeeper before 5.16 Out-of-Bounds Read via RTCP SDES Parsing

Özet

Türkçe özeti yalnızca kritik ve yüksek önemdeki açıklar için hazırlıyoruz. Bu açık için kaynağın kendi açıklamasını gösteriyoruz.

GNU Gatekeeper (gnugk) before 5.16 contains an out-of-bounds read vulnerability in ParseRTCP() in ProxyChannel.cxx that allows remote RTP peers to read heap memory past received packets. Attackers can send RTCP SDES items lacking a NUL byte to the media proxy port during proxied H.323 calls with EnableRTCPStats enabled, crashing the gatekeeper.

Etkilenen sürümler1 yazılım

Kaynaklar7 kaynak

• CVE.org kaydı
• NVD kaydı
• github.com/…ommit/e8939d03b0b2ef46e356f3144a6ee14f2920b777 Yama
• vulncheck.com/…-5.16-out-of-bounds-read-via-rtcp-sdes-parsing Üçüncü taraf
• github.com/willamowius/gnugk/releases/tag/v5_16 Diğer
• github.com/willamowius/gnugk/blob/v5_15/ProxyChannel.cxx Diğer
• github.com/willamowius/gnugk Diğer

Kayıt geçmişi

1. 3 Kas 2026 20:13Yayımlandı

İlgili açıklar

• 3,7 CVE-2026-121626GNU Gatekeeper before 5.16 Out-of-Bounds Read in H.460.24 RTCP Probe Handler
• 3,3 CVE-2026-121604wlroots before 0.20.2 Out-of-Bounds Read via read_surface_class() in xwm.c
• 6,9 CVE-2026-120757Heap Buffer Over-read via Non-Terminated Link Data in H5L__extern_traverse
• 6,3 CVE-2026-65138NVIDIA Slurm contains an attacker-controlled arbitrary-memory read in the slurmstepd socket API that could be used to…
• 1,9 CVE-2026-120756Heap Buffer Over-read via Malformed Message Size in HDF5's H5O__chunk_deserialize
• 4,7 CVE-2026-120755Integer Underflow Leads to Out-of-Bounds Read via Truncated Chunk in HDF5 Szip Filter