CVE-2019-7314 — Use After Free in Streaming Media

CWE-416 — Use After Free6 documents5 sources
Severity
9.8CRITICALNVD
EPSS
1.4%
top 19.60%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Live555 Streaming MediaDebian Linux
Timeline
PublishedFeb 4
Latest updateMay 13

Description

liblivemedia in Live555 before 2019.02.03 mishandles the termination of an RTSP stream after RTP/RTCP-over-RTSP has been set up, which could lead to a Use-After-Free error that causes the RTSP server to crash (Segmentation fault) or possibly have unspecified other impact.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9

Affected Packages1 packages

Also affects: Debian Linux 8.0

🔴Vulnerability Details

4
GHSA
GHSA-mgg6-45mj-x85q: liblivemedia in Live555 before 2019↗2022-05-13
▶
OSV
liblivemedia vulnerabilities↗2021-03-15
▶
OSV
CVE-2019-7314: liblivemedia in Live555 before 2019↗2019-02-04
▶
CVEList
CVE-2019-7314: liblivemedia in Live555 before 2019↗2019-02-04
▶

📋Vendor Advisories

1
Ubuntu
liveMedia vulnerabilities↗2021-03-15
▶
CVE-2019-7314 — Use After Free in Streaming Media | cvebase