PT-2019-1686 · Live555+2 · Liblivemedia+3

许彬彬 · Published 2019-01-14 · Updated 2021-03-15 · CVE-2019-6256

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Live555 Media Server version 0.93

Description A Denial of Service issue was discovered in the LIVE555 Streaming Media libraries as used in Live555 Media Server. It can cause an RTSPServer crash in handleHTTPCmd TunnelingPOST, when RTSP-over-HTTP tunneling is supported, via x-sessioncookie HTTP headers in a GET request and a POST request within the same TCP session. This occurs because of a call to an incorrect virtual function pointer in the readSocket function in GroupsockHelper.cpp. The vulnerability exists due to insufficient input validation in the readSocket function of the liblivemedia library, which can allow a remote attacker to cause a denial of service.

Recommendations For Live555 Media Server version 0.93, as a temporary workaround, consider disabling the handleHTTPCmd TunnelingPOST function or restricting RTSP-over-HTTP tunneling support until a patch is available. Additionally, restrict access to the readSocket function in GroupsockHelper.cpp to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Improper Handling of Exceptional Conditions

RCE

Weakness Enumeration

CWE-755

CWE-20

Related Identifiers

BDU:2019-01280

CVE-2019-6256

DLA-1690-1

DSA-4408-1

OPENSUSE-SU-2019:0058-1

OPENSUSE-SU-2019_0058-1

OPENSUSE-SU-2024:11023-1

USN-4853-1

Affected Products

Live555 Media Server

Suse

Ubuntu

Liblivemedia

References · 26

• 🔥 https://github.com/rgaufman/live555/issues/19 · Exploit
• 🔥 https://github.com/DoubleMice/cve-2018-4013 · Exploit
• https://osv.dev/vulnerability/openSUSE-SU-2019:0058-1 · Vendor Advisory
• https://osv.dev/vulnerability/DSA-4408-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2019-6256 · Security Note
• https://wiki.astralinux.ru/astra-linux-se16-bulletin-20220829SE16 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2019-6256 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-6256 · Vendor Advisory
• https://ubuntu.com/security/CVE-2019-7314 · Vendor Advisory
• https://ubuntu.com/security/CVE-2019-6256 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-4853-1 · Vendor Advisory
• https://security.gentoo.org/glsa/202005-06 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-6256 · Security Note
• https://ubuntu.com/security/CVE-2019-9215 · Vendor Advisory
• https://osv.dev/vulnerability/DLA-1690-1 · Vendor Advisory