CVE-2019-15232

Critical

Description

Live555 before 2019.08.16 has a Use-After-Free because GenericMediaServer::createNewClientSessionWithId can generate the same client session ID in succession, which is mishandled by the MPEG1or2 and Matroska file demultiplexors.

SeverityCritical

CVSS9.8

Exploit probability—

ProductLive555 Streaming Media

PublishedAug 20, 2019

First seenAug 20, 2019

How to fix

Update

live555 streaming_media2019-08-16 or later

Vendor advisories

security.gentoo.org/glsa/202005-06

Affected products

Product	Affected versions	Fixed in
live555 streaming_media	v < 2019-08-16	2019-08-16

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.