CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
Percentile
83.8%
A bug in the server implementation of RTSP-over-HTTP in live could allow a denial-of-service attack. A bug in the server implementation of RTSP-over-HTTP could allow a buffer overflow, which could result in the execution of arbitrary code when parsing a malformed RTSP stream (CVE-2018-4013). The flv_write_packet function in libavformat/flvenc.c in FFmpeg through 3.3.8 does not check for an empty audio packet, leading to an assertion failure (CVE-2018-15822). The live package has been updated to version 2018.11.26, the ffmpeg package has been updated to version 3.3.9, and the vlc package has been updated to version 3.0.5, fixing these issues and other bugs. The mplayer package has been rebuilt against the update live package to fix the RTSP-over-HTTP issues in mplayer.
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
Mageia | 6 | noarch | live | < 2018.11.26-1 | live-2018.11.26-1.mga6 |
Mageia | 6 | noarch | ffmpeg | < 3.3.9-1 | ffmpeg-3.3.9-1.mga6 |
Mageia | 6 | noarch | mplayer | < 1.3.0-13 | mplayer-1.3.0-13.mga6 |
Mageia | 6 | noarch | vlc | < 3.0.5-2 | vlc-3.0.5-2.mga6 |
Mageia | 6 | noarch | ffmpeg | < 3.3.9-1 | ffmpeg-3.3.9-1.mga6.tainted |
Mageia | 6 | noarch | mplayer | < 1.3.0-13 | mplayer-1.3.0-13.mga6.tainted |
Mageia | 6 | noarch | vlc | < 3.0.5-2 | vlc-3.0.5-2.mga6.tainted |
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
Percentile
83.8%