Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2021-93843
HistoryAug 12, 2021 - 12:00 a.m.

Live555 stack overflow vulnerability

2021-08-1200:00:00
China National Vulnerability Database
www.cnvd.org.cn
15
live555
stack overflow
vulnerability
media streaming
rtp
rtcp
rtsp
sip
dos attack
security

EPSS

0.001

Percentile

48.8%

Live555 is a cross-platform C open source project that provides solutions for streaming media, which implements support for standard streaming media delivery protocols such as RTP/RTCP, RTSP, SIP, etc. A security vulnerability exists in Live555, which stems from improper handling of a large number of requests for the same MP3 stream by the affected product, leading to recursion and stack buffer over-reads. An attacker could exploit the vulnerability to launch a DoS attack.