Vulnerability   
Search   
    Search 324607 CVE descriptions
and 145615 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

Test ID:1.3.6.1.4.1.25623.1.0.113355
Category:General
Title:Live555 Streaming Media < 2019.02.03 Use-After-Free Vulnerability - Windows
Summary:Live555 Streaming Media is prone to a Use-After-Free vulnerability.
Description:Summary:
Live555 Streaming Media is prone to a Use-After-Free vulnerability.

Vulnerability Insight:
The vulnerability exists because Live555 Streaming Media mishandles the
termination of an RTSP stream after RTP/RTCP-over-RTSP has been set up,
which could lead to a Use-After-Free error.

Vulnerability Impact:
Successful exploitation would allow an attacker to crash the RTSP server.
Other impact, such as code execution, may also be possible.

Affected Software/OS:
Live555 Streaming Media before version 2019.02.03.

Solution:
Update to version 2019.02.03.

CVSS Score:
7.5

CVSS Vector:
AV:N/AC:L/Au:N/C:P/I:P/A:P

Cross-Ref: Common Vulnerability Exposure (CVE) ID: CVE-2019-7314
Bugtraq: 20190317 [SECURITY] [DSA 4408-1] liblivemedia security update (Google Search)
https://seclists.org/bugtraq/2019/Mar/22
Debian Security Information: DSA-4408 (Google Search)
https://www.debian.org/security/2019/dsa-4408
https://security.gentoo.org/glsa/202005-06
http://lists.live555.com/pipermail/live-devel/2019-February/021143.html
http://www.live555.com/liveMedia/public/changelog.txt
https://lists.debian.org/debian-lts-announce/2019/02/msg00037.html
SuSE Security Announcement: openSUSE-SU-2019:1797 (Google Search)
http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00044.html
SuSE Security Announcement: openSUSE-SU-2019:1880 (Google Search)
http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00024.html
SuSE Security Announcement: openSUSE-SU-2020:0944 (Google Search)
http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00009.html
CopyrightCopyright (C) 2019 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit.

To run a free test of this vulnerability against your system, register below.




© 1998-2025 E-Soft Inc. All rights reserved.