Описание
In Live Networks, Inc., liblivemedia version 20200625, there is a potential buffer overflow bug in the server handling of a RTSP "PLAY" command, when the command specifies seeking by absolute time.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| liblivemedia | removed | package | ||
| liblivemedia | no-dsa | buster | package | |
| liblivemedia | no-dsa | stretch | package |
Примечания
http://lists.live555.com/pipermail/live-devel/2020-July/021662.html
Fixed in 2020.07.09 upstream, cf.
http://www.live555.com/liveMedia/public/changelog.txt
EPSS
Связанные уязвимости
In Live Networks, Inc., liblivemedia version 20200625, there is a potential buffer overflow bug in the server handling of a RTSP "PLAY" command, when the command specifies seeking by absolute time.
In Live Networks, Inc., liblivemedia version 20200625, there is a potential buffer overflow bug in the server handling of a RTSP "PLAY" command, when the command specifies seeking by absolute time.
In Live Networks, Inc., liblivemedia version 20200625, there is a potential buffer overflow bug in the server handling of a RTSP "PLAY" command, when the command specifies seeking by absolute time.
Уязвимость компонента RTSP PLAY Command Handler группы библиотек для потоковой передачи мультимедиа Live555, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании
EPSS