PT-2019-14393 · Haivision+1 · Srt+1

Federico Ceratto · Published 2019-08-29 · Updated 2024-06-15 · CVE-2019-15784

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SRT versions through 1.3.4

Description The issue is related to an array overflow in the CSndUList, which occurs when there are multiple SRT connections.

Recommendations For versions through 1.3.4, consider limiting the number of SRT connections to prevent the array overflow until a patch is available.

Fix

Improper Validation of Array Index

Weakness Enumeration

CWE-129

Related Identifiers

CVE-2019-15784

OPENSUSE-SU-2019:2083-1

OPENSUSE-SU-2019:2128-1

OPENSUSE-SU-2019_2083-1

OPENSUSE-SU-2024:11405-1

Affected Products

Srt

Suse

References · 17

• https://github.com/Haivision/srt/pull/811 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2019-15784 · Security Note
• https://cve.org/CVERecord?id=CVE-2019-15784 · Security Note
• http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00036.html · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:11405-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2019:2128-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2019-15784 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2019-15784 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-15784 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00020.html · Vendor Advisory
• https://ubuntu.com/security/CVE-2019-15784 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2019:2083-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2019-15784 · Vendor Advisory
• https://suse.com/security/cve/CVE-2019-15784 · Note
• https://bugzilla.suse.com/1148844 · Note