<head></head><body style="line-height: 1.5; font-size: 14px;font-family: Source Han Sans;">
<div style="font-family:Source Han Sans;font-size:14px;line-height:1.5;
" data-mce-style="font-family:Source Han Sans;font-size:14px;line-height:1.5;
"><div>Hi Ross,</div><div> </div><div>Thank you for confirming that these are bugs.</div><div> </div><div>Just to avoid ambiguity, the five issues I am referring to are:</div><div> 1. Out-of-range client_port values are accepted and truncated/wrapped, e.g. client_port=65535-65536 or client_port=99999-100000.</div><div> 2. Out-of-range interleaved channel values are accepted and truncated/wrapped, e.g. interleaved=256-257 or interleaved=999-1000.</div><div> 3. A Transport specification containing both unicast and multicast is accepted and treated as unicast.</div><div> 4. Multiple comma-separated transport specifications are not parsed independently, allowing parameters from a later specification to override values from an earlier one.</div><div> 5. An empty Transport header, or a Transport value without a transport-id, is accepted and results in a session being created with default RTP/UDP parameters.</div><div> </div><div>As you noted, I understand that these are not serious bugs, are triggered only by non-conformant clients, and do not cause the server to crash. I will describe them as low-severity RTSP Transport header validation bugs.</div><div> </div><div>I would like to ask whether you are comfortable with me submitting a CVE request for tracking purposes, including your confirmation that these are bugs and may be fixed in a future release.</div><div> </div><div>Please also let me know whether you are comfortable with public disclosure of the technical details now, or whether you would prefer me to wait until a fixed release is available.</div><div> </div><div>Best regards,</div><div>Bocheng Cao</div><span data-mce-type="bookmark" id="mce_2_start" data-mce-style="overflow:hidden;line-height:0px" style="overflow: hidden; line-height: 0px;"></span><br></div>
<br><img width="1" height="1" style="display:flex" src="https://tr.qiye.163.com/datacapture/mailreport/v2/0a9f63b890d009bakunm3e0093785e6d?zone=hz&to=live-devel@lists.live555.com&tm=1784084590282&sign=c09a401986234e45420213984a88329d&from=213220597%40seu.edu.cn&mid=ABUAEgAMKpaClydpttW3NarN&ack=0&toname=live-devel"></body>