CVE-2020-6095: Gstreamer Project Gst-Rtsp-Server

High severity, CVSS 7.5. EPSS: 2.9% chance of exploitation in the next 30 days.

An exploitable denial of service vulnerability exists in the GstRTSPAuth functionality of GStreamer/gst-rtsp-server 1.14.5. A specially crafted RTSP setup request can cause a null pointer deference resulting in denial-of-service. An attacker can send a malicious packet to trigger this vulnerability.

Affected products

• Gstreamer Project Gst-Rtsp-Server: version 1.14.5 only
• Opensuse Backports Sle: version 15.0 only
• Opensuse Leap: version 15.1 only

Published 2020-03-27. Last modified 2026-06-17.