PT-2019-14393 · Haivision+1 · Srt+1

Federico Ceratto · Publicado 2019-08-29 · Atualizado 2024-06-15 · CVE-2019-15784

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SRT versions through 1.3.4

Description The issue is related to an array overflow in the CSndUList, which occurs when there are multiple SRT connections.

Recommendations For versions through 1.3.4, consider limiting the number of SRT connections to prevent the array overflow until a patch is available.

Correção

Improper Validation of Array Index

Enumeração de Fraquezas

CWE-129

Identificadores relacionados

CVE-2019-15784

OPENSUSE-SU-2019:2083-1

OPENSUSE-SU-2019:2128-1

OPENSUSE-SU-2019_2083-1

OPENSUSE-SU-2024:11405-1

Produtos afetados

Srt

Suse

Referências · 17

• https://github.com/Haivision/srt/pull/811 · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2019-15784 · Nota de Segurança
• https://cve.org/CVERecord?id=CVE-2019-15784 · Nota de Segurança
• http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00036.html · Aviso do Fabricante
• https://osv.dev/vulnerability/openSUSE-SU-2024:11405-1 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2019-15784 · Nota
• https://bugzilla.suse.com/1148844 · Nota
• https://osv.dev/vulnerability/openSUSE-SU-2019:2128-1 · Aviso do Fabricante
• https://lists.opensuse.org/archives/list/[e-mail]/thread/C7KG6QZQ3QE4H6HS6U5MQCKEPENS2C3V/#C7KG6QZQ3QE4H6HS6U5MQCKEPENS2C3V · Nota
• https://osv.dev/vulnerability/DEBIAN-CVE-2019-15784 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2019-15784 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2019-15784 · Aviso do Fabricante
• http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00020.html · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2019-15784 · Aviso do Fabricante
• https://osv.dev/vulnerability/openSUSE-SU-2019:2083-1 · Aviso do Fabricante