SUSE CVE-2018-4013

An exploitable code execution vulnerability exists in the HTTP packet-parsing functionality of the LIVE555 RTSP server library version 0.92. A specially crafted packet can cause a stack-based buffer overflow, resulting in code execution. An attacker can send a packet to trigger this vulnerability...

The vulnerability of the implementation of the syntactic analyzer („parser“) for HTTP packets by the LIVE555 RTSP server lies in the stack buffer overflow issue, which allows an attacker to execute arbitrary code.

The vulnerability of the HTTP packet syntax analyzer “parser” implemented by the LIVE555 RTSP server is related to an error that causes stack buffer overflow. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code using a specially created malware package...

LIVE555 media server DoS

Uninitialized memory reading on RTSP query processing...