rpm package
suse/live555&distro=SUSE Package Hub 15
pkg:rpm/suse/live555&distro=SUSE%20Package%20Hub%2015
Vulnerabilities (4)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2019-9215 | — | < 2019.06.28-bp150.12.1 | 2019.06.28-bp150.12.1 | Feb 28, 2019 | In Live555 before 2019.02.27, malformed headers lead to invalid memory access in the parseAuthorizationHeader function. | ||
| CVE-2019-7314 | — | < 2019.06.28-bp150.12.1 | 2019.06.28-bp150.12.1 | Feb 4, 2019 | liblivemedia in Live555 before 2019.02.03 mishandles the termination of an RTSP stream after RTP/RTCP-over-RTSP has been set up, which could lead to a Use-After-Free error that causes the RTSP server to crash (Segmentation fault) or possibly have unspecified other impact. | ||
| CVE-2019-6256 | — | < 2018.12.14-bp150.3.3.1 | 2018.12.14-bp150.3.3.1 | Jan 14, 2019 | A Denial of Service issue was discovered in the LIVE555 Streaming Media libraries as used in Live555 Media Server 0.93. It can cause an RTSPServer crash in handleHTTPCmd_TunnelingPOST, when RTSP-over-HTTP tunneling is supported, via x-sessioncookie HTTP headers in a GET request a | ||
| CVE-2018-4013 | — | < 2018.12.14-bp150.3.3.1 | 2018.12.14-bp150.3.3.1 | Oct 19, 2018 | An exploitable code execution vulnerability exists in the HTTP packet-parsing functionality of the LIVE555 RTSP server library version 0.92. A specially crafted packet can cause a stack-based buffer overflow, resulting in code execution. An attacker can send a packet to trigger t |
- CVE-2019-9215Feb 28, 2019affected < 2019.06.28-bp150.12.1fixed 2019.06.28-bp150.12.1
In Live555 before 2019.02.27, malformed headers lead to invalid memory access in the parseAuthorizationHeader function.
- CVE-2019-7314Feb 4, 2019affected < 2019.06.28-bp150.12.1fixed 2019.06.28-bp150.12.1
liblivemedia in Live555 before 2019.02.03 mishandles the termination of an RTSP stream after RTP/RTCP-over-RTSP has been set up, which could lead to a Use-After-Free error that causes the RTSP server to crash (Segmentation fault) or possibly have unspecified other impact.
- CVE-2019-6256Jan 14, 2019affected < 2018.12.14-bp150.3.3.1fixed 2018.12.14-bp150.3.3.1
A Denial of Service issue was discovered in the LIVE555 Streaming Media libraries as used in Live555 Media Server 0.93. It can cause an RTSPServer crash in handleHTTPCmd_TunnelingPOST, when RTSP-over-HTTP tunneling is supported, via x-sessioncookie HTTP headers in a GET request a
- CVE-2018-4013Oct 19, 2018affected < 2018.12.14-bp150.3.3.1fixed 2018.12.14-bp150.3.3.1
An exploitable code execution vulnerability exists in the HTTP packet-parsing functionality of the LIVE555 RTSP server library version 0.92. A specially crafted packet can cause a stack-based buffer overflow, resulting in code execution. An attacker can send a packet to trigger t