PT-2019-18730 · Live Networks · Live555

Zounathan · Publicado 2019-02-11 · Atualizado 2020-08-24 · CVE-2019-7732

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Live555 version 0.95

Description A memory leak can occur due to a setup packet, potentially leading to a denial of service (DoS) because when there are multiple instances of certain fields, such as username, realm, nonce, uri, or response, only the last instance can be freed.

Recommendations For Live555 version 0.95, consider restricting the handling of setup packets to prevent the memory leak until a fix is available. As a temporary workaround, review the code to ensure proper memory management for multiple instances of fields like username, realm, nonce, uri, or response.

Correção

Memory Leak

Enumeração de Fraquezas

CWE-401

Identificadores relacionados

CVE-2019-7732

Produtos afetados

Live555

Referências · 6

• https://github.com/rgaufman/live555/issues/20 · Nota
• https://osv.dev/vulnerability/UBUNTU-CVE-2019-7732 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2019-7732 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2019-7732 · Aviso do Fabricante
• https://cve.org/CVERecord?id=CVE-2019-7732 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2019-7732 · Nota de Segurança