CVE-2019-7314

CRITICAL 9.8CVE-2019-7314 · Published 04/02/2019 · updated 17/06/2026

In short

CVE-2019-7314 is a CRITICAL (CVSS 9.8) vulnerability affecting streaming media (live555).
Chance of exploitation in the next 30 days (EPSS): 3.2%, higher than 88.1% of all vulnerabilities.
Fix: update to 0.95 or later.

Package	Affected versions	Patched versions
streaming media live555	`< 0.95`	`0.95`

Description

liblivemedia in Live555 before 2019.02.03 mishandles the termination of an RTSP stream after RTP/RTCP-over-RTSP has been set up, which could lead to a Use-After-Free error that causes the RTSP server to crash (Segmentation fault) or possibly have unspecified other impact.

References

lists.live555.com/pipermail/live-devel/2019-February/021143.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2019-07/msg00044.html
lists.opensuse.org/opensuse-security-announce/2019-08/msg00024.html
lists.opensuse.org/opensuse-security-announce/2020-07/msg00009.html
live555.com/liveMedia/public/changelog.txt · Vendor Advisory
lists.debian.org/debian-lts-announce/2019/02/msg00037.html · Mailing List
seclists.org/bugtraq/2019/Mar/22
security.gentoo.org/glsa/202005-06
debian.org/security/2019/dsa-4408

More vulnerabilities in streaming media

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

streaming media

live555

< 0.95

0.95

More vulnerabilities in streaming media

See all →