PT-2021-17977 · Unknown+2 · Live555 Streaming Media+2

Zhao Jiaxu · Published 2021-03-15 · Updated 2021-07-04 · CVE-2021-28899

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: LIVE555 Streaming Media versions prior to 2021.3.16

Description: A vulnerability exists in the AC3AudioFileServerMediaSubsession, ADTSAudioFileServerMediaSubsession, and AMRAudioFileServerMediaSubsessionLive OnDemandServerMediaSubsession subclasses.

Recommendations: For versions prior to 2021.3.16, update to version 2021.3.16 or later to resolve the issue.

Fix

Weakness Enumeration

CWE-399

Related Identifiers

BDU:2025-04153

CVE-2021-28899

MGASA-2021-0313

OPENSUSE-SU-2021:0915-1

OPENSUSE-SU-2021:0937-1

OPENSUSE-SU-2021_0915-1

OPENSUSE-SU-2024:11023-1

Affected Products

Astra Linux

Live555 Streaming Media

Suse

References · 21

• https://nvd.nist.gov/vuln/detail/CVE-2021-28899 · Security Note
• https://wiki.astralinux.ru/astra-linux-se47-bulletin-2025-0422SE75 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se17-bulletin-2025-0319SE17 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-04153 · Security Note
• https://ubuntu.com/security/CVE-2021-28899 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-28899 · Vendor Advisory
• http://lists.live555.com/pipermail/live-devel/2021-March/021891.html · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2021-28899 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2021:0915-1 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2021-0313.html · Security Note
• https://osv.dev/vulnerability/MGASA-2021-0313 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-28899 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2021:0937-1 · Vendor Advisory
• http://live555.com/liveMedia/public/changelog.txt · Note
• https://bugzilla.suse.com/1185874 · Note