Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2021-41396

Опубликовано: 12 июл. 2022
Источник: nvd
CVSS3: 7.5
CVSS2: 5
EPSS Низкий

Описание

Live555 through 1.08 does not handle socket connections properly. A huge number of incoming socket connections in a short time invokes the error-handling module, in which a heap-based buffer overflow happens. An attacker can leverage this to launch a DoS attack.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:live555:live555:*:*:*:*:*:*:*:*
Версия до 1.08 (включая)

EPSS

Процентиль: 63%
0.0044
Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-787

Связанные уязвимости

CVSS3: 7.5
ubuntu
больше 3 лет назад

Live555 through 1.08 does not handle socket connections properly. A huge number of incoming socket connections in a short time invokes the error-handling module, in which a heap-based buffer overflow happens. An attacker can leverage this to launch a DoS attack.

CVSS3: 7.5
debian
больше 3 лет назад

Live555 through 1.08 does not handle socket connections properly. A hu ...

CVSS3: 7.5
github
больше 3 лет назад

Live555 through 1.08 does not handle socket connections properly. A huge number of incoming socket connections in a short time invokes the error-handling module, in which a heap-based buffer overflow happens. An attacker can leverage this to launch a DoS attack.

EPSS

Процентиль: 63%
0.0044
Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-787