medium6.5
CVE-2021-38382
Live555 through 1.08 does not handle Matroska and Ogg files properly.
Impact
Live555 through 1.08 does not handle Matroska and Ogg files properly. Sending two successive RTSP SETUP commands for the same track causes a Use-After-Free and daemon crash.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Live555 | Live555 | before 2021.08.06 |
Weakness classification
References
- NVD record
- CVE.org record
- http://lists.live555.com/pipermail/live-devel/2021-August/021959.html
- http://www.live555.com/liveMedia/public/changelog.txt#%5B2021.08.06%5D
- http://lists.live555.com/pipermail/live-devel/2021-August/021959.html
- http://www.live555.com/liveMedia/public/changelog.txt#%5B2021.08.06%5D