In Live555 before 2019.02.27, malformed headers lead to invalid memory access in the parseAuthorizationHeader function.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade liblivemedia | Mar 18, 2019 | Feb 27, 2019 |
| Gentoo Linux | — | Upgrade media-plugins/live. | Jun 15, 2020 | Feb 28, 2019 |
| Suse | — | Upgrade libusageenvironment3Upgrade live555-develUpgrade libgroupsock8Upgrade live555Upgrade libliveMedia66Upgrade libbasicusageenvironment1 | Jul 24, 2019 | Feb 27, 2019 |
| Ubuntu | — | Upgrade liblivemedia50 (Ubuntu Pro)Upgrade liblivemedia62 (Ubuntu Pro) | Mar 22, 2023 | Feb 28, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub