CVE-2019-9215
Fixed in a distro release EPSS 2%
In Live555 before 2019.02.27, malformed headers lead to invalid memory access in the parseAuthorizationHeader function.
Products: live555 streaming_media, opensuse backports_sle, opensuse leap, debian_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 14 | liblivemedia | 2018.11.26-1.1 |
| Debian 8 | liblivemedia | 2014.01.13-1+deb8u3 |
| Debian 9 | liblivemedia | 2016.11.28-1+deb9u2 |
| SUSE Package Hub 15 | live555 | 2019.06.28-bp150.12.1 |
| SUSE Package Hub 15 SP1 | live555 | 2019.06.28-bp151.3.3.1 |
| Ubuntu Pro 16.04 LTS | liblivemedia | 2016.02.09-1ubuntu0.1~esm1 |
| Ubuntu Pro 18.04 LTS | liblivemedia | 2018.02.18-1ubuntu0.1~esm1 |
| openSUSE Leap 15.0 | live555 | 2019.06.28-bp150.12.1 |
| openSUSE Leap 15.1 | live555 | 2019.06.28-bp150.12.1 |
| openSUSE Leap 15.2 | live555 | 2019.06.28-lp152.3.3.1 |