CVE-2021-38380

概要

参考情報

• lists.live555.com/pipermail/live-devel/2021-August/021954.html · Exploit
• live555.com/liveMedia/public/changelog.txt

live555 のその他の脆弱性

• CVE-2023-37117緊急 9.8A heap-use-after-free vulnerability was found in live555 version 2023.05.10 while handling the SETUP.
• CVE-2021-41396高 7.5Live555 through 1.08 does not handle socket connections properly. A huge number of incoming socket connections in a short time invokes the e…
• CVE-2021-39283中 5.5liveMedia/FramedSource.cpp in Live555 through 1.08 allows an assertion failure and application exit via multiple SETUP and PLAY commands.
• CVE-2021-39282高 7.5Live555 through 1.08 has a memory leak in AC3AudioStreamParser for AC3 files.
• CVE-2021-38382中 6.5Live555 through 1.08 does not handle Matroska and Ogg files properly. Sending two successive RTSP SETUP commands for the same track causes a…