The vulnerability of the `createNewClientSessionWithId()` function in the `GenericMediaServer` component of the streaming multimedia Live555 library lies in its reliance on memory management after it is freed. This vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the createNewClientSessionWithId function in the GenericMediaServer component of the streaming multimedia Live555 library is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to gain access to confidential data, compromise i...

GLSA-202407-23 : LIVE555 Media Server: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202407-23 LIVE555 Media Server: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in LIVE555 Media Server. Please review the CVE identifiers referenced below for details. Tenable has extracted the preceding...

LIVE555 Media Server: Multiple Vulnerabilities

Background LIVE555 Media Server is a set of libraries for multimedia streaming. Description Multiple vulnerabilities have been discovered in LIVE555 Media Server. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details...

Astra Linux – Vulnerability in liblivemedia

A heap-use-after-free vulnerability was discovered in live555 version 2023.05.10 while handling the SETUP process...

SUSE CVE-2023-37117

A heap-use-after-free vulnerability was found in live555 version 2023.05.10 while handling the SETUP...

CVE-2023-37117

A heap-use-after-free vulnerability was found in live555 version 2023.05.10 while handling the SETUP...

CVE-2023-37117

A heap-use-after-free vulnerability was found in live555 version 2023.05.10 while handling the SETUP...

CVE-2023-37117

A heap-use-after-free vulnerability was found in live555 version 2023.05.10 while handling the SETUP...

UBUNTU-CVE-2023-37117

A heap-use-after-free vulnerability was found in live555 version 2023.05.10 while handling the SETUP...

Heap overflow

A heap-use-after-free vulnerability was found in live555 version 2023.05.10 while handling the SETUP...

live555 Security Breach

Live555 is a cross-platform C++ open source project that provides a solution for streaming media, which implements support for standard streaming media transport protocols such as RTP/RTCP, RTSP, SIP, etc. A security vulnerability exists in live555 version number 2023.05.10, which stems from a...

CVE-2023-37117

Removed by vendor...

CVE-2023-37117

A heap-use-after-free vulnerability was found in live555 version 2023.05.10 while handling the SETUP...

CVE-2023-37117

A heap-use-after-free vulnerability was found in live555 version 2023.05.10 while handling the SETUP...

CVE-2023-37117

A heap-use-after-free vulnerability was found in live555 version 2023.05.10 while handling the SETUP...

CVE-2023-37117

CVE-2023-37117 is a heap-use-after-free vulnerability in the live555 library (version 2023.05.10) when processing the SETUP command. The issue is documented across multiple feeds as affecting live555 and rated with a critical impact by CVSS 3.1 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). The public do...

PT-2024-12592 · Live555 +1 · Live555 +1

Name of the Vulnerable Software and Affected Versions: live555 version 2023.05.10 Description: A heap-use-after-free issue was found in live555 while handling the SETUP. Recommendations: For live555 version 2023.05.10, at the moment, there is no information about a newer version that contains a f...

SUSE CVE-2007-6036

The parseRTSPRequestString function in LIVE555 Media Server 2007.11.01 and earlier allows remote attackers to cause a denial of service daemon crash via a short RTSP query, which causes a negative number to be used during memory allocation...

SUSE CVE-2018-4013

An exploitable code execution vulnerability exists in the HTTP packet-parsing functionality of the LIVE555 RTSP server library version 0.92. A specially crafted packet can cause a stack-based buffer overflow, resulting in code execution. An attacker can send a packet to trigger this vulnerability...

SUSE CVE-2019-6256

A Denial of Service issue was discovered in the LIVE555 Streaming Media libraries as used in Live555 Media Server 0.93. It can cause an RTSPServer crash in handleHTTPCmdTunnelingPOST, when RTSP-over-HTTP tunneling is supported, via x-sessioncookie HTTP headers in a GET request and a POST request...