CVE-2015-8272
RTMPDump 2.4 allows remote attackers to trigger a denial of service (NULL pointer dereference and...
RTMPDump 2.4 allows remote attackers to trigger a denial of service (NULL pointer dereference and process crash).
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
RTMPDump 2.4 allows remote attackers to trigger a denial of service (NULL pointer dereference and process crash).
- Record
CVE-2015-8272- CVSS 3.0
- 6.5 Medium
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:N/A:P - Weakness
- CWE-476
- Updated
- 2026-11-02
CVE List No score
RTMPDump 2.4 allows remote attackers to trigger a denial of service (NULL pointer dereference and process crash).
- Record
CVE-2015-8272- Updated
- 2026-11-02
EUVDEUVD-2015-8160 No score
RTMPDump 2.4 allows remote attackers to trigger a denial of service (NULL pointer dereference and process crash).
- Record
EUVD-2015-8160- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-fm48-q5qq-894j
RTMPDump 2.4 allows remote attackers to trigger a denial of service (NULL pointer dereference and...
RTMPDump 2.4 allows remote attackers to trigger a denial of service (NULL pointer dereference and process crash).
- Record
GHSA-fm48-q5qq-894j- CVSS 3.0
- 6.5 Medium
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Weakness
- CWE-476
- Updated
- 2026-11-02
OSV
RTMPDump 2.4 allows remote attackers to trigger a denial of service (NULL pointer dereference and process crash).
- Record
CVE-2015-8272- CVSS 3.0
- 6.5 Medium
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2015-8272
RTMPDump 2.4 allows remote attackers to trigger a denial of service (NULL pointer dereference and process crash).
- Record
DEBIAN-CVE-2015-8272- CVSS 3.0
- 6.5 Medium
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2015-8272
RTMPDump 2.4 allows remote attackers to trigger a denial of service (NULL pointer dereference and process crash).
- Record
UBUNTU-CVE-2015-8272- CVSS 3.0
- 6.5 Medium
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVUSN-3283-1 No score
rtmpdump vulnerabilities
Dave McDaniel discovered that rtmpdump incorrectly handled certain malformed streams. If a user were tricked into processing a specially crafted stream, a remote attacker could cause rtmpdump to crash, resulting in a denial of service, or possibly execute arbitrary code.
- Record
USN-3283-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
rtmpdumpDebian:12 |
before 2.4+20151223.gitfa8646d.1-1 | 2.4+20151223.gitfa8646d.1-1 |
rtmpdumpDebian:13 |
before 2.4+20151223.gitfa8646d.1-1 | 2.4+20151223.gitfa8646d.1-1 |
rtmpdumpDebian:14 |
before 2.4+20151223.gitfa8646d.1-1 | 2.4+20151223.gitfa8646d.1-1 |
rtmpdumpDebian:7 From an advisory covering 3 CVEs |
before 2.4+20111222.git4e06e21-1+deb7u1, plus listed versions 2.4+20111222.git4e06e21-1 |
2.4+20111222.git4e06e21-1+deb7u1 |
rtmpdumpDebian:8 From an advisory covering 3 CVEs |
before 2.4+20150115.gita107cef-1+deb8u1, plus listed versions 2.4+20150115.gita107cef-1 |
2.4+20150115.gita107cef-1+deb8u1 |
rtmpdumpUbuntu:14.04:LTS |
before 2.4+20121230.gitdf6c518-1ubuntu0.1, plus listed versions 2.4+20121230.gitdf6c518-1 |
2.4+20121230.gitdf6c518-1ubuntu0.1 |
rtmpdumpUbuntu:16.04:LTS |
before 2.4+20151223.gitfa8646d-1ubuntu0.1, plus listed versions 2.4+20150115.gita107cef-1build12.4+20151223.gitfa8646d-12.4+20151223.gitfa8646d-1build1 |
2.4+20151223.gitfa8646d-1ubuntu0.1 |
rtmpdumpUbuntu:14.04:LTS From an advisory covering 3 CVEs |
before 2.4+20121230.gitdf6c518-1ubuntu0.1, plus listed versions 2.4+20121230.gitdf6c518-1 |
2.4+20121230.gitdf6c518-1ubuntu0.1 |
rtmpdumpUbuntu:16.04:LTS From an advisory covering 3 CVEs |
before 2.4+20151223.gitfa8646d-1ubuntu0.1, plus listed versions 2.4+20150115.gita107cef-1build12.4+20151223.gitfa8646d-12.4+20151223.gitfa8646d-1build1 |
2.4+20151223.gitfa8646d-1ubuntu0.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2015-8272 is a medium vulnerability (CVSS 6.5) in Rtmpdump Project Rtmpdump, published April 13, 2017. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.73%, the 86th percentile. Fixed in rtmpdump 2.4+20151223.gitfa8646d.1-1.