Threats tagged 'ghsa-vj9h-pfc2-q63m'

GNU Gatekeeper (gnugk) versions before 5.16 have an out-of-bounds read vulnerability in the ParseRTCP() function within ProxyChannel.cxx. This flaw allows remote RTP peers to read heap memory beyond the received packets by sending specially crafted RTCP SDES items without a NUL byte to the media proxy port during proxied H.323 calls with EnableRTCPStats enabled. Exploitation can cause the gatekeeper to crash.