CVE-2023-37117
- EPSS 0.25%
- Veröffentlicht 12.01.2024 07:15:12
- Zuletzt bearbeitet 21.11.2024 08:11:03
A heap-use-after-free vulnerability was found in live555 version 2023.05.10 while handling the SETUP.
CVE-2021-41396
- EPSS 0.44%
- Veröffentlicht 12.07.2022 14:15:14
- Zuletzt bearbeitet 21.11.2024 06:26:12
Live555 through 1.08 does not handle socket connections properly. A huge number of incoming socket connections in a short time invokes the error-handling module, in which a heap-based buffer overflow happens. An attacker can leverage this to launch a...
CVE-2021-39282
- EPSS 0.3%
- Veröffentlicht 18.08.2021 17:15:09
- Zuletzt bearbeitet 21.11.2024 06:19:06
Live555 through 1.08 has a memory leak in AC3AudioStreamParser for AC3 files.
CVE-2021-39283
- EPSS 0.21%
- Veröffentlicht 18.08.2021 17:15:09
- Zuletzt bearbeitet 21.11.2024 06:19:07
liveMedia/FramedSource.cpp in Live555 through 1.08 allows an assertion failure and application exit via multiple SETUP and PLAY commands.
CVE-2021-38380
- EPSS 0.28%
- Veröffentlicht 10.08.2021 18:15:07
- Zuletzt bearbeitet 21.11.2024 06:16:56
Live555 through 1.08 mishandles huge requests for the same MP3 stream, leading to recursion and s stack-based buffer over-read. An attacker can leverage this to launch a DoS attack.
CVE-2021-38381
- EPSS 0.23%
- Veröffentlicht 10.08.2021 18:15:07
- Zuletzt bearbeitet 21.11.2024 06:16:57
Live555 through 1.08 does not handle MPEG-1 or 2 files properly. Sending two successive RTSP SETUP commands for the same track causes a Use-After-Free and daemon crash.
CVE-2021-38382
- EPSS 0.23%
- Veröffentlicht 10.08.2021 18:15:07
- Zuletzt bearbeitet 21.11.2024 06:16:57
Live555 through 1.08 does not handle Matroska and Ogg files properly. Sending two successive RTSP SETUP commands for the same track causes a Use-After-Free and daemon crash.