In Live555 0.95, a setup packet can cause a memory leak leading to DoS because, when there are multiple instances of a single field (username, realm, nonce, uri, or response), only the last instance can ever be freed.
{
"binaries": [
{
"binary_version": "2016.02.09-1ubuntu0.1~esm1",
"binary_name": "libbasicusageenvironment1"
},
{
"binary_version": "2016.02.09-1ubuntu0.1~esm1",
"binary_name": "libgroupsock8"
},
{
"binary_version": "2016.02.09-1ubuntu0.1~esm1",
"binary_name": "liblivemedia-dev"
},
{
"binary_version": "2016.02.09-1ubuntu0.1~esm1",
"binary_name": "liblivemedia50"
},
{
"binary_version": "2016.02.09-1ubuntu0.1~esm1",
"binary_name": "libusageenvironment3"
},
{
"binary_version": "2016.02.09-1ubuntu0.1~esm1",
"binary_name": "livemedia-utils"
}
]
}
{
"binaries": [
{
"binary_version": "2018.02.18-1ubuntu0.1~esm1",
"binary_name": "libbasicusageenvironment1"
},
{
"binary_version": "2018.02.18-1ubuntu0.1~esm1",
"binary_name": "libgroupsock8"
},
{
"binary_version": "2018.02.18-1ubuntu0.1~esm1",
"binary_name": "liblivemedia-dev"
},
{
"binary_version": "2018.02.18-1ubuntu0.1~esm1",
"binary_name": "liblivemedia62"
},
{
"binary_version": "2018.02.18-1ubuntu0.1~esm1",
"binary_name": "libusageenvironment3"
},
{
"binary_version": "2018.02.18-1ubuntu0.1~esm1",
"binary_name": "livemedia-utils"
}
]
}