CVE-2019-7314
Fixed in a distro release EPSS 3%
liblivemedia in Live555 before 2019.02.03 mishandles the termination of an RTSP stream after RTP/RTCP-over-RTSP has been set up, which could lead to a Use-After-Free error that causes the RTSP server to crash (Segmentation fault) or possibly have unspecified other impact.
Products: live555 streaming_media, debian_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Arch Linux | live-media | 2019.05.12-1 |
| Debian 14 | liblivemedia | 2018.11.26-1.1 |
| Debian 8 | liblivemedia | 2014.01.13-1+deb8u2 |
| Debian 9 | liblivemedia | 2016.11.28-1+deb9u2 |
| SUSE Package Hub 15 | live555 | 2019.06.28-bp150.12.1 |
| SUSE Package Hub 15 SP1 | live555 | 2019.06.28-bp151.3.3.1 |
| Ubuntu Pro 16.04 LTS | liblivemedia | 2016.02.09-1ubuntu0.1~esm1 |
| Ubuntu Pro 18.04 LTS | liblivemedia | 2018.02.18-1ubuntu0.1~esm1 |
| openSUSE Leap 15.0 | live555 | 2019.06.28-bp150.12.1 |
| openSUSE Leap 15.1 | live555 | 2019.06.28-bp150.12.1 |
| openSUSE Leap 15.2 | live555 | 2019.06.28-lp152.3.3.1 |