CVE-2019-7314

Critical

Description

liblivemedia in Live555 before 2019.02.03 mishandles the termination of an RTSP stream after RTP/RTCP-over-RTSP has been set up, which could lead to a Use-After-Free error that causes the RTSP server to crash (Segmentation fault) or possibly have unspecified other impact.

SeverityCritical

CVSS9.8

Exploit probability—

Product

Live555 Streaming Media

PublishedFeb 4, 2019

First seenFeb 4, 2019

How to fix

Update

live555 streaming_media0.95 or later

Vendor advisories

debian.org/security/2019/dsa-4408
security.gentoo.org/glsa/202005-06

Affected products

Product	Affected versions	Fixed in
live555 streaming_media	v < 0.95	0.95
debian debian_linux	8.0	—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.