CVE-2019-7732
published 2019-02-11CVE-2019-7732: In Live555 0.95, a setup packet can cause a memory leak leading to DoS because, when there are multiple instances of a single field (username, realm, nonce…
PriorityP432high7.5CVSS 3.0
AVNACLPRNUINSUCNINAH
EPSS
1.40%
69.6th percentile
In Live555 0.95, a setup packet can cause a memory leak leading to DoS because, when there are multiple instances of a single field (username, realm, nonce, uri, or response), only the last instance can ever be freed.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| live555 | streaming_media | — | — |
CVSS provenance
nvdv3.07.5HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
osv7.5HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-wpfj-9q2g-67mp: In Live555 0
ghsa_unreviewed·2022-05-13
CVE-2019-7732 [HIGH] CWE-401 GHSA-wpfj-9q2g-67mp: In Live555 0
In Live555 0.95, a setup packet can cause a memory leak leading to DoS because, when there are multiple instances of a single field (username, realm, nonce, uri, or response), only the last instance can ever be freed.
OSV
CVE-2019-7732: In Live555 0
osv·2019-02-11·CVSS 7.5
CVE-2019-7732 [HIGH] CVE-2019-7732: In Live555 0
In Live555 0.95, a setup packet can cause a memory leak leading to DoS because, when there are multiple instances of a single field (username, realm, nonce, uri, or response), only the last instance can ever be freed.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2019-02-11
Published