RTSPServer-Code-Execution-Vulnerability

Vulnerabilidad de ejecución de código en Live Networks LIVE555 streaming media RTSPServer lookForHeader CVE-2018-4013 Resumen Existe una vulnerabilidad de ejecución de código explotable en la funcionalidad de análisis de paquetes HTTP de la biblioteca del servidor RTSP de LIVE555. Un paquete...

openSUSE 16: libBasicUsageEnvironment2 / libUsageEnvironment3 / libgroupsock33 / etc (openSUSE-SU-2026:21863-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21863-1 advisory. Changes in live555: - Update to version 2026.08.25: Fixed a bug in VorbisAudioRTPSource that could have caused a malicious SDP description to...

OPENSUSE-SU-2026:21863-1 Security update for live555

This update for live555 fixes the following issues: Changes in live555: - Update to version 2026.08.25: Fixed a bug in "VorbisAudioRTPSource" that could have caused a malicious SDP description to crash a RTP client. - update to 2026.08.14: Fixed a bug that could cause a problem with subclassed...

Astra Linux – Vulnerability in liblivemedia

Vulnerability in the AC3AudioFileServerMediaSubsession, ADTSAudioFileServerMediaSubsession, and AMRAudioFileServerMediaSubsessionLive OnDemandServerMediaSubsession subclasses in Networks LIVE555 Streaming Media before 2021.3.16...

Astra Linux – Vulnerability in liblivemedia

A heap-use-after-free vulnerability was discovered in live555 version 2023.05.10 while handling the SETUP process...

Astra Linux – Vulnerability in liblivemedia

In Live555 0.95, there is a buffer overflow due to a large integer in the Content-Length HTTP header. This occurs because the handleRequestBytes function uses a memmove operation without proper bounds...

Astra Linux – Vulnerability in liblivemedia

Live555 before 2019.08.16 has a Use-After-Free issue, as GenericMediaServer::createNewClientSessionWithId can generate the same client session ID consecutively. This issue is handled improperly by the MPEG1or2 and Matroska file demultiplexors...

Linux Distros Unpatched Vulnerability : CVE-2026-38998

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A use-after-free in the SocketDescriptor::tcpReadHandler1 function liveMedia/RTPInterface.cpp of LIVE555 Streaming Media version 2026.02.26 allows attackers to...

CVE-2026-38998

A flaw was found in LIVE555 Streaming Media. This use-after-free vulnerability allows a remote attacker to cause a Denial of Service DoS. By sending a series of specially crafted Real-Time Streaming Protocol RTSP and Hypertext Transfer Protocol HTTP requests, an attacker can trigger the flaw,...

CVE-2026-38998

A use-after-free in the SocketDescriptor::tcpReadHandler1 function liveMedia/RTPInterface.cpp of LIVE555 Streaming Media version 2026.02.26 allows attackers to cause a Denial of Service DoS via sending a series of crafted RTSP and HTTP requests to the server...

CVE-2026-38998

A use-after-free in the SocketDescriptor::tcpReadHandler1 function liveMedia/RTPInterface.cpp of LIVE555 Streaming Media version 2026.02.26 allows attackers to cause a Denial of Service DoS via sending a series of crafted RTSP and HTTP requests to the server...

UBUNTU-CVE-2026-38998

A use-after-free in the SocketDescriptor::tcpReadHandler1 function liveMedia/RTPInterface.cpp of LIVE555 Streaming Media version 2026.02.26 allows attackers to cause a Denial of Service DoS via sending a series of crafted RTSP and HTTP requests to the server...

CVE-2026-38998

A use-after-free in the SocketDescriptor::tcpReadHandler1 function liveMedia/RTPInterface.cpp of LIVE555 Streaming Media version 2026.02.26 allows attackers to cause a Denial of Service DoS via sending a series of crafted RTSP and HTTP requests to the server...

CVE-2026-38998

A use-after-free in the SocketDescriptor::tcpReadHandler1 function liveMedia/RTPInterface.cpp of LIVE555 Streaming Media version 2026.02.26 allows attackers to cause a Denial of Service DoS via sending a series of crafted RTSP and HTTP requests to the server...

PT-2026-89125

Name of the Vulnerable Software and Affected Versions LIVE555 Streaming Media version 2026.02.26 Description A use-after-free issue exists in the SocketDescriptor::tcpReadHandler1 function within the liveMedia/RTPInterface.cpp file. This occurs when the server processes a series of specially...

CVE-2026-38998

A use-after-free in the SocketDescriptor::tcpReadHandler1 function liveMedia/RTPInterface.cpp of LIVE555 Streaming Media version 2026.02.26 allows attackers to cause a Denial of Service DoS via sending a series of crafted RTSP and HTTP requests to the server...

CVE-2026-38998

A use-after-free vulnerability exists in the SocketDescriptor::tcpReadHandler1 function (located in liveMedia/RTPInterface.cpp) of LIVE555 Streaming Media (version 2026.02.26 ). An attacker can exploit this flaw by sending a series of crafted RTSP and HTTP requests to the server, resulting in a D...

CVE-2026-38998: Use After Free

A use-after-free in the SocketDescriptor::tcpReadHandler1 function liveMedia/RTPInterface.cpp of LIVE555 Streaming Media version 2026.02.26 allows attackers to cause a Denial of Service DoS via sending a series of crafted RTSP and HTTP requests to the server...

EUVD-2026-75138

A use-after-free in the SocketDescriptor::tcpReadHandler1 function liveMedia/RTPInterface.cpp of LIVE555 Streaming Media version 2026.02.26 allows attackers to cause a Denial of Service DoS via sending a series of crafted RTSP and HTTP requests to the server...

Linux Distros Unpatched Vulnerability : CVE-2026-41470

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - LIVE555 before 2026.04.22 contains an authorization bypass vulnerability in RTSP session command handling that allows attackers to replay valid Session tokens...