CVE-2019-15232
published 2019-08-20CVE-2019-15232: Live555 before 2019.08.16 has a Use-After-Free because GenericMediaServer::createNewClientSessionWithId can generate the same client session ID in succession…
PriorityP342critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
EPSS
1.72%
75.0th percentile
Live555 before 2019.08.16 has a Use-After-Free because GenericMediaServer::createNewClientSessionWithId can generate the same client session ID in succession, which is mishandled by the MPEG1or2 and Matroska file demultiplexors.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| live555 | streaming_media | < 2019-08-16 | 2019-08-16 |
CVSS provenance
nvdv3.19.8CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvdv2.07.5HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
osv9.8CRITICAL
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-m42g-4p87-qcrh: Live555 before 2019
ghsa_unreviewed·2022-05-24
CVE-2019-15232 [CRITICAL] CWE-416 GHSA-m42g-4p87-qcrh: Live555 before 2019
Live555 before 2019.08.16 has a Use-After-Free because GenericMediaServer::createNewClientSessionWithId can generate the same client session ID in succession, which is mishandled by the MPEG1or2 and Matroska file demultiplexors.
OSV
CVE-2019-15232: Live555 before 2019
osv·2019-08-20·CVSS 9.8
CVE-2019-15232 [CRITICAL] CVE-2019-15232: Live555 before 2019
Live555 before 2019.08.16 has a Use-After-Free because GenericMediaServer::createNewClientSessionWithId can generate the same client session ID in succession, which is mishandled by the MPEG1or2 and Matroska file demultiplexors.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2019-08-20
Published