Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-j293-2f59-6wr3

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

A Denial of Service issue was discovered in the LIVE555 Streaming Media libraries as used in Live555 Media Server 0.93. It can cause an RTSPServer crash in handleHTTPCmd_TunnelingPOST, when RTSP-over-HTTP tunneling is supported, via x-sessioncookie HTTP headers in a GET request and a POST request within the same TCP session. This occurs because of a call to an incorrect virtual function pointer in the readSocket function in GroupsockHelper.cpp.

A Denial of Service issue was discovered in the LIVE555 Streaming Media libraries as used in Live555 Media Server 0.93. It can cause an RTSPServer crash in handleHTTPCmd_TunnelingPOST, when RTSP-over-HTTP tunneling is supported, via x-sessioncookie HTTP headers in a GET request and a POST request within the same TCP session. This occurs because of a call to an incorrect virtual function pointer in the readSocket function in GroupsockHelper.cpp.

EPSS

Процентиль: 68%
0.00555
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-755

Связанные уязвимости

CVSS3: 9.8
ubuntu
около 7 лет назад

A Denial of Service issue was discovered in the LIVE555 Streaming Media libraries as used in Live555 Media Server 0.93. It can cause an RTSPServer crash in handleHTTPCmd_TunnelingPOST, when RTSP-over-HTTP tunneling is supported, via x-sessioncookie HTTP headers in a GET request and a POST request within the same TCP session. This occurs because of a call to an incorrect virtual function pointer in the readSocket function in GroupsockHelper.cpp.

CVSS3: 9.8
nvd
около 7 лет назад

A Denial of Service issue was discovered in the LIVE555 Streaming Media libraries as used in Live555 Media Server 0.93. It can cause an RTSPServer crash in handleHTTPCmd_TunnelingPOST, when RTSP-over-HTTP tunneling is supported, via x-sessioncookie HTTP headers in a GET request and a POST request within the same TCP session. This occurs because of a call to an incorrect virtual function pointer in the readSocket function in GroupsockHelper.cpp.

CVSS3: 9.8
debian
около 7 лет назад

A Denial of Service issue was discovered in the LIVE555 Streaming Medi ...

CVSS3: 9.8
fstec
почти 7 лет назад

Уязвимость функции readSocket библиотеки Live555 Media Server пакета liblivemedia, позволяющая нарушителю вызвать отказ в обслуживании

suse-cvrf
почти 7 лет назад

Security update for live555

EPSS

Процентиль: 68%
0.00555
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-755