Description
liblivemedia in Live555 before 2019.02.03 mishandles the termination of an RTSP stream after RTP/RTCP-over-RTSP has been set up, which could lead to a Use-After-Free error that causes the RTSP server to crash (Segmentation fault) or possibly have unspecified other impact.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- https://lists.debian.org/debian-lts-announce/2019/02/msg00037.html ↗
- http://www.live555.com/liveMedia/public/changelog.txt ↗
- http://lists.live555.com/pipermail/live-devel/2019-February/021143.html ↗
- https://seclists.org/bugtraq/2019/Mar/22 ↗
- https://www.debian.org/security/2019/dsa-4408 ↗
- http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00044.html ↗
- http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00024.html ↗
- https://security.gentoo.org/glsa/202005-06 ↗
- http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00009.html ↗