Ovenmediaengine
Monthly
Unauthenticated denial of service in OvenMediaEngine through 0.21.0 lets a remote sender stall origin-to-edge stream relay by submitting crafted OVT packets whose header payload_length field exceeds 32750, holding connections open indefinitely while buffered memory accumulates. The flaw sits in OvtPacket::LoadHeader() in the OVT packetizer/depacketizer path (CWE-770, allocation of resources without limits or throttling); the assessed vector is AV:N/AC:L/PR:N/UI:N with availability-only impact, matching the 8.7 CVSS 4.0 score. Exploitability is bounded in practice by exposure: OVT is normally an internal origin-to-edge link, so internet-facing risk exists only where that listener is externally reachable. No public exploit code has been identified at time of analysis, and the vendor fix is referenced upstream (commit ce316146, issue #2330).
Unauthenticated denial of service in OvenMediaEngine through 0.21.0 lets a remote sender stall origin-to-edge stream relay by submitting crafted OVT packets whose header payload_length field exceeds 32750, holding connections open indefinitely while buffered memory accumulates. The flaw sits in OvtPacket::LoadHeader() in the OVT packetizer/depacketizer path (CWE-770, allocation of resources without limits or throttling); the assessed vector is AV:N/AC:L/PR:N/UI:N with availability-only impact, matching the 8.7 CVSS 4.0 score. Exploitability is bounded in practice by exposure: OVT is normally an internal origin-to-edge link, so internet-facing risk exists only where that listener is externally reachable. No public exploit code has been identified at time of analysis, and the vendor fix is referenced upstream (commit ce316146, issue #2330).