CRITICAL
liblivemedia in Live555 before 2019.02.03 mishandles the termination of an RTSP stream after RTP/RTCP-over-RTSP has been set up, which could lead to a Use-After-Free error that causes the RTSP server to crash (Segmentation fault) or possibly have unspecified other impact
Published Feb 4, 2019
9.8
CRITICALCVSS 3.0
EPSS 3.19%
Description
liblivemedia in Live555 before 2019.02.03 mishandles the termination of an RTSP stream after RTP/RTCP-over-RTSP has been set up, which could lead to a Use-After-Free error that causes the RTSP server to crash (Segmentation fault) or possibly have unspecified other impact.
Affected products
No data.
Configuration 1
- < 0.95
Configuration 2
- 8.0
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Weaknesses (1)
References (10)
- http://lists.live555.com/pipermail/live-devel/2019-February/021143.html x_refsource_MISCMailing ListVendor Advisory
- http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00044.html vendor-advisoryx_refsource_SUSE
- http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00024.html vendor-advisoryx_refsource_SUSE
- http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00009.html vendor-advisoryx_refsource_SUSE
- http://www.live555.com/liveMedia/public/changelog.txt x_refsource_MISCVendor Advisory
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-16857 Advisory
- https://lists.debian.org/debian-lts-announce/2019/02/msg00037.html mailing-listx_refsource_MLISTMailing ListThird Party Advisory
- https://seclists.org/bugtraq/2019/Mar/22 mailing-listx_refsource_BUGTRAQ
- https://security.gentoo.org/glsa/202005-06 vendor-advisoryx_refsource_GENTOO
- https://www.debian.org/security/2019/dsa-4408 vendor-advisoryx_refsource_DEBIAN
| Link | Providers | Tags |
|---|---|---|
| http://lists.live555.com/pipermail/live-devel/2019-February/021143.html | x_refsource_MISCMailing ListVendor Advisory | |
| http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00044.html | vendor-advisoryx_refsource_SUSE | |
| http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00024.html | vendor-advisoryx_refsource_SUSE | |
| http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00009.html | vendor-advisoryx_refsource_SUSE | |
| http://www.live555.com/liveMedia/public/changelog.txt | x_refsource_MISCVendor Advisory | |
| https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-16857 | Advisory | |
| https://lists.debian.org/debian-lts-announce/2019/02/msg00037.html | mailing-listx_refsource_MLISTMailing ListThird Party Advisory | |
| https://seclists.org/bugtraq/2019/Mar/22 | mailing-listx_refsource_BUGTRAQ | |
| https://security.gentoo.org/glsa/202005-06 | vendor-advisoryx_refsource_GENTOO | |
| https://www.debian.org/security/2019/dsa-4408 | vendor-advisoryx_refsource_DEBIAN |
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Feb 4, 2019
Updated Aug 4, 2024
Reserved Feb 3, 2019
Link CVE-2019-7314
CISA Vulnrichment
Updated n/a
ENISA EUVD
EUVD-2019-16857 Assigner mitre
Published Feb 4, 2019
Updated Aug 4, 2024
Exploited since n/a
Link EUVD-2019-16857