DEBIAN-CVE-2019-7314

See a problem?
Please try reporting it to the source first.
Source
https://security-tracker.debian.org/tracker/CVE-2019-7314
Import Source
https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2019-7314.json
JSON Data
https://api.osv.dev/v1/vulns/DEBIAN-CVE-2019-7314
Upstream
  • CVE-2019-7314
Downstream
Published
2019-02-04T02:29:00Z
Modified
2026-10-05T04:00:04Z
Severity
  • 9.8 (Critical) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

liblivemedia in Live555 before 2019.02.03 mishandles the termination of an RTSP stream after RTP/RTCP-over-RTSP has been set up, which could lead to a Use-After-Free error that causes the RTSP server to crash (Segmentation fault) or possibly have unspecified other impact.

References

Affected packages

Debian:14 / liblivemedia

Package

Name
liblivemedia
Purl
pkg:deb/debian/liblivemedia?arch=source&distro=forky

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2018.11.26-1.1

Affected versions

2004.*
2004.11.11a-1
2005.*
2005.04.01-1
2005.06.16-1
2005.07.21-1
2005.10.05-1
2006.*
2006.03.17-1
2006.03.17-2
2007.*
2007.02.20-1
2007.02.20-2
2008.*
2008.07.25-1
2008.07.25-2
2009.*
2009.11.27-1
2010.*
2010.02.10-1
2010.04.09-1
2010.11.17-1
2011.*
2011.03.14-1
2011.05.25-1
2011.06.16-1
2011.07.08-1
2011.07.21-1
2011.08.22-1
2011.09.02-1
2011.12.23-1
2012.*
2012.02.04-1
2012.02.29-1
2012.02.29-2
2012.04.04-1
2012.04.21-1
2012.05.03-1~bpo60+1
2012.05.03-1
2012.05.17-1~bpo60+1
2012.05.17-1
2012.05.17-1+wheezy1
2012.08.31-1
2012.10.24-1
2012.11.16-1
2012.11.30-1
2013.*
2013.01.05-1
2013.01.05-2
2013.01.05-3
2013.01.15-1
2013.04.30-1
2013.10.25-1
2014.*
2014.01.13-1
2015.*
2015.12.22-1
2016.*
2016.01.12-1
2016.01.16-1
2016.01.20-1
2016.01.29-1
2016.01.29-2
2016.02.09-1
2016.03.16-1
2016.04.01-1
2016.04.21-1
2016.06.26-1
2016.07.19-1
2016.08.07-1
2016.08.27-1
2016.09.22-1
2016.11.06-1
2016.11.17-1
2016.11.28-1
2017.*
2017.01.26-1
2017.04.10-1
2017.04.26-1
2017.06.04-1
2017.06.04-2
2017.07.18-1
2017.09.12-1
2017.10.28-1
2017.10.28-2
2018.*
2018.01.24-1
2018.01.29-1
2018.02.18-1
2018.02.28-1
2018.04.25-1
2018.04.25-2
2018.07.07-1
2018.08.05-1
2018.08.27-1
2018.08.27-2
2018.08.28a-1
2018.09.06-1
2018.09.10-1
2018.09.18-1
2018.10.17-1
2018.11.26-1

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Database specific

source 
"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2019-7314.json"