CVE:CVE-2020-24214
CNNVD:CNNVD-202009-958
IPTV H.264 H.265是视频编码器的标准。
IPTV H.264 H.265 video encoders 中存在安全漏洞。攻击者可以发送精心设计的未经身份验证的 RTSP 请求，从而导致缓冲区溢出和应用程序崩溃。设备最多一分钟内无法执行其主要的视频编码和流媒体用途，直到它自动重新启动。攻击者可以每分钟发送一次恶意请求，从而有效地禁用设备。
solution:Upgrade szuray iptv/h.264_video_encoder_firmware to a higher version than -; Upgrade szuray iptv/h.265_video_encoder_firmware to a higher version than -; Upgrade jtechdigital h.264_iptv_encoder_1080p@60hz_firmware to a higher version than -; Upgrade provideoinstruments vecaster-hd-h264_firmware to a higher version than -; Upgrade provideoinstruments vecaster-hd-hevc_firmware to a higher version than -; Upgrade provideoinstruments vecaster-4k-hevc_firmware to a higher version than -; Upgrade provideoinstruments vecaster-hd-sdi_firmware to a higher version than -