{"resultsPerPage":25,"startIndex":0,"totalResults":25,"format":"NVD_CVE","version":"2.0","timestamp":"2026-09-05T21:50:02.930","vulnerabilities":[{"cve":{"id":"CVE-2007-6036","sourceIdentifier":"cve@mitre.org","published":"2007-11-20T11:46:00.000","lastModified":"2026-06-16T22:47:18.110","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The parseRTSPRequestString function in LIVE555 Media Server 2007.11.01 and earlier allows remote attackers to cause a denial of service (daemon crash) via a short RTSP query, which causes a negative number to be used during memory allocation."},{"lang":"es","value":"La función parseRTSPRequestString en LIVE555 Media Server 2007.11.01 y anteriores permite a atacantes remotos provocar denegación de servicio (caida de demonio) a través de una consulta pequeña RTSP, lo cual deriba en un número negativo para ser usado a lo largo de localización de memoria."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","baseScore":7.1,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:live555:media_server:*:*:*:*:*:*:*:*","versionEndIncluding":"2007.11.01","matchCriteriaId":"6D017FDB-819F-4D52-9D22-D895E1C45CEE"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/live555x-adv.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/27711","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29356","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200803-22.xml","source":"cve@mitre.org"},{"url":"http://www.live555.com/liveMedia/public/changelog.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/483910/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/26488","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2007/3939","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/38542","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/live555x-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/27711","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29356","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200803-22.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.live555.com/liveMedia/public/changelog.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/483910/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/26488","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2007/3939","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/38542","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2013-6933","sourceIdentifier":"cve@mitre.org","published":"2014-01-23T21:55:04.913","lastModified":"2026-06-17T00:01:09.153","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The parseRTSPRequestString function in Live Networks Live555 Streaming Media 2011.08.13 through 2013.11.25, as used in VideoLAN VLC Media Player, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a (1) space or (2) tab character at the beginning of an RTSP message, which triggers an integer underflow, infinite loop, and buffer overflow."},{"lang":"es","value":"La función parseRTSPRequestString en Live Networks Live555 Streaming Media 2011.08.13 hasta la versión 2013.11.25, tal como se usa en VideoLAN VLC Media Player, permite a atacantes remotos provocar una denegación de servicio (caída) y posiblemente ejecutar código arbitrario a través de (1) un espacio o (2) un carácter de tabulación en el comienzo de un mensaje RTSP, lo que desencadena en un underflow de enteros, bucle infinito, y desbordamiento de búfer."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"},{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2011-08-13:*:*:*:*:*:*:*","matchCriteriaId":"A45002A7-F124-431B-AA70-56229E1317A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2011-08-20:*:*:*:*:*:*:*","matchCriteriaId":"8E1CAC51-7C4C-42B9-8156-E20C4385BC3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2011-08-22:*:*:*:*:*:*:*","matchCriteriaId":"4BF7B64A-6494-458B-9FB3-38A88D08EDC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2011-09-02:*:*:*:*:*:*:*","matchCriteriaId":"C16C555C-3151-4FFC-B268-83DC402132C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2011-09-19:*:*:*:*:*:*:*","matchCriteriaId":"B7377FA8-4D34-4BE4-9202-D70305A62CE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2011-10-05:*:*:*:*:*:*:*","matchCriteriaId":"3C9B8790-AF24-488A-93C2-0901E4992BDC"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2011-10-09:*:*:*:*:*:*:*","matchCriteriaId":"408A3979-ED61-43C9-9F38-A37E62EBC834"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2011-10-18:*:*:*:*:*:*:*","matchCriteriaId":"5E7BB08A-2A7D-4045-B057-2F446701BDEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2011-10-27:*:*:*:*:*:*:*","matchCriteriaId":"E4211BB5-36B3-4CD0-8CB0-AD94DC89069B"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2011-11-02:*:*:*:*:*:*:*","matchCriteriaId":"EB5EEBB5-3475-4C83-AF1E-DC2C60BE9AE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2011-11-08:*:*:*:*:*:*:*","matchCriteriaId":"B58FD629-EC62-48A7-837C-41E63A8E81B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2011-11-20:*:*:*:*:*:*:*","matchCriteriaId":"A865F441-3309-45F4-8FE9-56BA1D8DC904"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2011-11-27:*:*:*:*:*:*:*","matchCriteriaId":"B6FAF3F7-297D-49B2-A606-9DD42CD0CC41"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2011-11-28:*:*:*:*:*:*:*","matchCriteriaId":"365E8422-54C5-4C17-979C-92B7BDF5A483"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2011-11-29:*:*:*:*:*:*:*","matchCriteriaId":"6143D0D4-A079-44B9-A62D-2B934B0F9B20"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2011-12-02:*:*:*:*:*:*:*","matchCriteriaId":"94C05920-3B27-413F-89AF-528312411D29"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2011-12-19:*:*:*:*:*:*:*","matchCriteriaId":"4E282208-3FEF-4BD3-B564-3C1DD310FA05"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2011-12-20:*:*:*:*:*:*:*","matchCriteriaId":"3C551AB2-DEA7-46C7-A2F8-EF077A23F64E"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2011-12-23:*:*:*:*:*:*:*","matchCriteriaId":"D0F9FE29-7073-4810-B942-F2BE9F4D7B6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2012-01-07:*:*:*:*:*:*:*","matchCriteriaId":"B05F8751-3319-49AF-878B-6BEA691B652C"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2012-01-13:*:*:*:*:*:*:*","matchCriteriaId":"00CCB938-B838-49A7-A870-2DAF807D1BBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2012-01-25:*:*:*:*:*:*:*","matchCriteriaId":"2F2D389E-A724-4C5F-AB89-E1B4B776F767"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2012-01-26:*:*:*:*:*:*:*","matchCriteriaId":"B22B204A-34BB-43B6-B149-7DB6EF68465A"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2012-02-03:*:*:*:*:*:*:*","matchCriteriaId":"41359A64-534C-48AA-A83F-3C67A97AD951"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2012-02-04:*:*:*:*:*:*:*","matchCriteriaId":"DD9D9EF4-3955-4F06-B2C1-9885033B6C93"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2012-02-29:*:*:*:*:*:*:*","matchCriteriaId":"22107008-9BFE-40BF-BFF2-97071713F705"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2012-03-20:*:*:*:*:*:*:*","matchCriteriaId":"7607FB28-FE81-42AC-A9EC-9176D2328154"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2012-03-22:*:*:*:*:*:*:*","matchCriteriaId":"408AEECF-6A81-4362-B8E8-459A0B3D93A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2012-04-04:*:*:*:*:*:*:*","matchCriteriaId":"819CD2BE-9E4F-4F2E-BC1A-DFA1948DE7C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2012-04-18:*:*:*:*:*:*:*","matchCriteriaId":"BA171CDE-C0F6-4F95-BBC0-00037FD6A279"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2012-04-21:*:*:*:*:*:*:*","matchCriteriaId":"EACDE24D-7EB7-4145-B06F-EEC1D0E21C11"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2012-04-26:*:*:*:*:*:*:*","matchCriteriaId":"D4345E1E-94F8-4EFA-A207-AE44E19D059E"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2012-04-27:*:*:*:*:*:*:*","matchCriteriaId":"39D0D99A-255C-482E-BEBB-18AB6831EE5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2012-05-03:*:*:*:*:*:*:*","matchCriteriaId":"301DC911-664A-450B-8224-7DAFEEAEAE00"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2012-05-11:*:*:*:*:*:*:*","matchCriteriaId":"A75A91C9-60BA-4736-98A6-B7B1EF856298"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2012-05-17:*:*:*:*:*:*:*","matchCriteriaId":"1A6AE62B-C794-4A4D-98D0-5CFFE34E4C6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2012-06-12:*:*:*:*:*:*:*","matchCriteriaId":"30D2DC4F-CC65-4397-8898-418A3A72A743"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2012-06-17:*:*:*:*:*:*:*","matchCriteriaId":"1CA6C606-092B-4DA4-B0BD-436536156A1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2012-06-23:*:*:*:*:*:*:*","matchCriteriaId":"25AB9956-4EE8-44FE-BD6A-0334AE0D72CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2012-06-26:*:*:*:*:*:*:*","matchCriteriaId":"234283EC-9044-4B67-A5C3-C4C001617425"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2012-07-03:*:*:*:*:*:*:*","matchCriteriaId":"0BB315D3-A712-47AE-88BF-78EFEE5C989E"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2012-07-06:*:*:*:*:*:*:*","matchCriteriaId":"7591CFB0-6555-4F62-AC84-FE1802DE5BBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2012-07-14:*:*:*:*:*:*:*","matchCriteriaId":"05A7723D-8A04-43FB-AA4D-815A3D2FE448"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2012-07-18:*:*:*:*:*:*:*","matchCriteriaId":"96D1E140-20CE-435F-8687-2BDAAF0C0629"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2012-07-24:*:*:*:*:*:*:*","matchCriteriaId":"03C3D7F2-CABD-4416-8B97-04EC4CDE69BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2012-07-26:*:*:*:*:*:*:*","matchCriteriaId":"148C690D-E3F7-481F-9615-47269D77DB84"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2012-08-08:*:*:*:*:*:*:*","matchCriteriaId":"0D82AF84-B20E-462A-B6F3-34C73002C7EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2012-08-12:*:*:*:*:*:*:*","matchCriteriaId":"C2AC27FF-849D-4FBE-A285-A49A975BADC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2012-08-17:*:*:*:*:*:*:*","matchCriteriaId":"48BB8222-AFBA-46CD-93B0-D89160026C75"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2012-08-20:*:*:*:*:*:*:*","matchCriteriaId":"82073CFD-5F7F-4B8A-A6E6-0763C5588FDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2012-08-28:*:*:*:*:*:*:*","matchCriteriaId":"4616FBAF-C807-4A2E-B406-6BBDB947EAB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2012-08-29:*:*:*:*:*:*:*","matchCriteriaId":"C3652119-67CF-40AF-B3D0-40CF67B32DE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2012-08-30:*:*:*:*:*:*:*","matchCriteriaId":"EDF68CA0-A754-4F84-8FE6-AD854FB94A24"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2012-08-31:*:*:*:*:*:*:*","matchCriteriaId":"9DE80D63-1E2A-4AAB-A6CC-02FBAEE7FF53"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2012-09-06:*:*:*:*:*:*:*","matchCriteriaId":"96C14DFC-1C57-48E3-84E7-52520CA06B38"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2012-09-07:*:*:*:*:*:*:*","matchCriteriaId":"BBBD037D-9F90-47DE-B658-FBFDC6D72590"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2012-09-11:*:*:*:*:*:*:*","matchCriteriaId":"885F579E-4921-460B-B086-947D6D395E63"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2012-09-12:*:*:*:*:*:*:*","matchCriteriaId":"B9CBE3E6-4D9D-4691-BB20-03C1CBFAF524"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2012-09-13:*:*:*:*:*:*:*","matchCriteriaId":"D5B6E3F3-917C-4AAA-9C4D-D31B32093B64"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2012-09-27:*:*:*:*:*:*:*","matchCriteriaId":"B1E28B3B-0DE2-4C8D-B0F2-792881C783EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2012-10-01:*:*:*:*:*:*:*","matchCriteriaId":"AD0D25E5-5573-406D-96A0-97AAC1B2D2C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2012-10-04:*:*:*:*:*:*:*","matchCriteriaId":"DFFE9F37-51BB-40B5-9689-4A913F3A7D69"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2012-10-11:*:*:*:*:*:*:*","matchCriteriaId":"A6C98716-D615-4CC6-85A0-8FEBD4C66B9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2012-10-12:*:*:*:*:*:*:*","matchCriteriaId":"624C8DB6-ACB5-43A9-B2BB-AC9379532176"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2012-10-16:*:*:*:*:*:*:*","matchCriteriaId":"140F7963-B3CA-4A93-89A1-49E3346B2C67"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2012-10-17:*:*:*:*:*:*:*","matchCriteriaId":"643AA143-E7D3-4C7B-9C1A-0109EC4A9FED"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2012-10-18:*:*:*:*:*:*:*","matchCriteriaId":"2E75B333-4256-43AF-972B-0E2CA1C16F3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2012-10-21:*:*:*:*:*:*:*","matchCriteriaId":"BE6DA613-DDA6-436D-B292-C3123E67896D"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2012-10-22:*:*:*:*:*:*:*","matchCriteriaId":"B28E104E-718E-4844-807D-3AB19E745450"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2012-10-24:*:*:*:*:*:*:*","matchCriteriaId":"0B6FAD95-A908-4ABE-B79D-B4BC3E4F0A42"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2012-11-05:*:*:*:*:*:*:*","matchCriteriaId":"F0E84364-76D0-40A2-80DC-CF8059F9C8D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2012-11-08:*:*:*:*:*:*:*","matchCriteriaId":"2743E88A-7597-4E4F-8117-00FD92C151AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2012-11-16:*:*:*:*:*:*:*","matchCriteriaId":"E8991D05-7738-45D2-9194-7A82EDDD23CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2012-11-17:*:*:*:*:*:*:*","matchCriteriaId":"80E3C636-6520-4FB7-ABAB-3E3CF9D013A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2012-11-22:*:*:*:*:*:*:*","matchCriteriaId":"6CF97BA1-966A-4A5B-A7B6-9C519539D31B"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2012-11-28:*:*:*:*:*:*:*","matchCriteriaId":"EBEA38E0-1D63-4C27-8660-148755938656"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2012-11-29:*:*:*:*:*:*:*","matchCriteriaId":"6C109135-BE9F-4A8A-9E11-7CC8BF61865A"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2012-11-30:*:*:*:*:*:*:*","matchCriteriaId":"0B47795D-1D08-4DEB-98A0-FEA0429733A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2012-12-15:*:*:*:*:*:*:*","matchCriteriaId":"94F93171-E67D-4237-8F78-C7C99129464C"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2012-12-18:*:*:*:*:*:*:*","matchCriteriaId":"1E002F2D-EA2A-482D-9D1B-163B65945B59"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2012-12-21:*:*:*:*:*:*:*","matchCriteriaId":"81BD15D0-6358-4D95-AD41-DD35C6018F0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2012-12-22:*:*:*:*:*:*:*","matchCriteriaId":"B023AE91-C984-4248-8A72-27DA625EBD0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2012-12-23:*:*:*:*:*:*:*","matchCriteriaId":"3E2DAB59-5654-44CF-A59D-A403DA481B59"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2012-12-24:*:*:*:*:*:*:*","matchCriteriaId":"AD733052-9F7E-46C6-A8CF-9F3285914407"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2013-01-03:*:*:*:*:*:*:*","matchCriteriaId":"185AB6DE-C619-4E5F-8527-939FC4DA6F29"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2013-01-04:*:*:*:*:*:*:*","matchCriteriaId":"96DA2E4B-0C3B-4FFD-9E39-BA1914799F75"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2013-01-05:*:*:*:*:*:*:*","matchCriteriaId":"687B7EFD-4360-4D21-BC41-3B30BC56DC0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2013-01-15:*:*:*:*:*:*:*","matchCriteriaId":"D74612DF-3789-4B2B-9E5C-885D0ED5694C"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2013-01-18:*:*:*:*:*:*:*","matchCriteriaId":"E0528143-59F1-4935-9ACC-E244E023329A"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2013-01-19:*:*:*:*:*:*:*","matchCriteriaId":"F819C1AB-A740-4B12-A24A-E3C8A1AC4ABE"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2013-01-21:*:*:*:*:*:*:*","matchCriteriaId":"8427A9A7-E1DA-49CD-B4D7-C7B28BC2A9F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2013-01-22:*:*:*:*:*:*:*","matchCriteriaId":"D446D9E6-FEAC-44EB-8BD2-06123A5707AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2013-01-23:*:*:*:*:*:*:*","matchCriteriaId":"EFC79E8E-0E83-4925-965B-A36EE4DB62EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2013-01-25:*:*:*:*:*:*:*","matchCriteriaId":"B4F886AC-41A5-4632-87AD-9AA8A2FE5442"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2013-02-05:*:*:*:*:*:*:*","matchCriteriaId":"2C33655C-ADF7-4ECA-8B1D-608AFCBF6859"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2013-02-11:*:*:*:*:*:*:*","matchCriteriaId":"C75EA3CA-18CC-4F1F-8F6F-2AF1B01FC035"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2013-02-27:*:*:*:*:*:*:*","matchCriteriaId":"DE38C2B2-6018-4713-BCA1-F54D921E9E6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2013-03-07:*:*:*:*:*:*:*","matchCriteriaId":"9D254451-D21B-47BF-B741-10AAD224158F"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2013-03-23:*:*:*:*:*:*:*","matchCriteriaId":"D6E8FDED-C6AD-4387-BEA6-C76597BD56E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2013-03-31:*:*:*:*:*:*:*","matchCriteriaId":"A8C4E33E-B8FD-4894-A40D-53EDD1183F2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2013-04-01:*:*:*:*:*:*:*","matchCriteriaId":"BCFEE9D6-9E7D-440C-B885-927CCC145F5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2013-04-04:*:*:*:*:*:*:*","matchCriteriaId":"FB1DAE9E-D010-4703-B27E-5028CD8E4BF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2013-04-05:*:*:*:*:*:*:*","matchCriteriaId":"C5C4D4E0-D759-41CE-B291-4E5F595B14B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2013-04-06:*:*:*:*:*:*:*","matchCriteriaId":"BB2BF5EA-EEDD-46AA-9983-F100CD73E087"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2013-04-08:*:*:*:*:*:*:*","matchCriteriaId":"DCB88E5E-DC89-44B9-9D02-8DA95E83CE90"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2013-04-16:*:*:*:*:*:*:*","matchCriteriaId":"B726220E-DDF1-475C-972A-62E37A93CD26"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2013-04-21:*:*:*:*:*:*:*","matchCriteriaId":"2A765DBD-AFC1-4516-BE00-DFED7A2101DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2013-04-22:*:*:*:*:*:*:*","matchCriteriaId":"D037880F-345F-48B7-8A04-4DC317C54E59"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2013-04-23:*:*:*:*:*:*:*","matchCriteriaId":"AB8A9B5B-C622-4625-BD67-BDC4CE637B20"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2013-04-29:*:*:*:*:*:*:*","matchCriteriaId":"9B8C271F-C431-4EE5-A09A-1E15A4F93876"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2013-04-30:*:*:*:*:*:*:*","matchCriteriaId":"58DDCF4F-0587-4D02-A4E9-D1F83C3984F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2013-05-30:*:*:*:*:*:*:*","matchCriteriaId":"6A850872-3945-4D6F-B2B3-E9D7F89229AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2013-06-06:*:*:*:*:*:*:*","matchCriteriaId":"3DA561AB-0613-47A5-A949-1768485EE26E"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2013-06-14:*:*:*:*:*:*:*","matchCriteriaId":"EFCB9354-0EF3-4311-95E9-4CF2D1219C43"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2013-06-18:*:*:*:*:*:*:*","matchCriteriaId":"5D97303C-47CA-4D13-BF22-FDB183F00C06"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2013-06-30:*:*:*:*:*:*:*","matchCriteriaId":"10D8F54D-9479-4815-83E0-A4BE57791853"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2013-07-03:*:*:*:*:*:*:*","matchCriteriaId":"641BE714-8505-460F-B640-96B75C02EDE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2013-07-16:*:*:*:*:*:*:*","matchCriteriaId":"6BF158FC-6142-4FD2-9488-CC9C4A9F3A73"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2013-07-30:*:*:*:*:*:*:*","matchCriteriaId":"21FF1062-3B6E-4D9C-B1C3-C101024714F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2013-07-31:*:*:*:*:*:*:*","matchCriteriaId":"549A17E1-26A6-431F-9F3A-AFA2283903B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2013-08-05:*:*:*:*:*:*:*","matchCriteriaId":"FEA2C834-B47E-4072-ABB9-A1932CD812A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2013-08-15:*:*:*:*:*:*:*","matchCriteriaId":"16C9ED67-5436-4C5A-888A-375EAF7E90F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2013-08-16:*:*:*:*:*:*:*","matchCriteriaId":"8FB4B630-CAB2-4A04-9A3E-93ADEA354137"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2013-08-28:*:*:*:*:*:*:*","matchCriteriaId":"6903E6A0-F635-451C-AAE9-B65EF193285E"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2013-08-31:*:*:*:*:*:*:*","matchCriteriaId":"B43D6137-DCDA-4C06-B313-14C3CE70C688"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2013-09-07:*:*:*:*:*:*:*","matchCriteriaId":"7DA25A92-102D-4AD0-95D8-4D560ABCAB08"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2013-09-08:*:*:*:*:*:*:*","matchCriteriaId":"2D34CABE-E94C-4099-A1A4-E8924999396B"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2013-09-11:*:*:*:*:*:*:*","matchCriteriaId":"83E551C1-53CC-4710-9BBF-A2D963A895E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2013-09-18:*:*:*:*:*:*:*","matchCriteriaId":"D4A1A1AF-EA59-48F2-9C2D-A4932410A9C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2013-09-27:*:*:*:*:*:*:*","matchCriteriaId":"E43D7E60-F1E1-4F0A-8FEE-ADFAF50FC4C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2013-09-30:*:*:*:*:*:*:*","matchCriteriaId":"1E686148-D7BE-431B-BEA3-728D07E3F4A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2013-10-01:*:*:*:*:*:*:*","matchCriteriaId":"15E3FB98-5244-48C8-9D5F-A369DC241171"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2013-10-02:*:*:*:*:*:*:*","matchCriteriaId":"52DBF533-EE8C-42BC-B3BE-EE26239F35C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2013-10-03:*:*:*:*:*:*:*","matchCriteriaId":"EEB2023C-351A-414B-9644-E58AD4770652"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2013-10-07:*:*:*:*:*:*:*","matchCriteriaId":"DE99061E-1BE0-4288-8716-2DA7ADA35590"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2013-10-08:*:*:*:*:*:*:*","matchCriteriaId":"8DFE9064-D78C-48FF-8F3C-BE1D0EB62F7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2013-10-09:*:*:*:*:*:*:*","matchCriteriaId":"2CDDCFFF-F199-47F7-9BF2-D0BFBF089D4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2013-10-11:*:*:*:*:*:*:*","matchCriteriaId":"FF4B49E0-9D17-476C-AF28-18E127E20BE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2013-10-16:*:*:*:*:*:*:*","matchCriteriaId":"46648DEC-C6F4-483A-B54F-1B1F28F72C9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2013-10-18:*:*:*:*:*:*:*","matchCriteriaId":"D998881F-71F9-46F7-A321-EC59D0CCCED3"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2013-10-22:*:*:*:*:*:*:*","matchCriteriaId":"A61BFD6F-71DB-4B78-A706-D20420168194"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2013-10-24:*:*:*:*:*:*:*","matchCriteriaId":"2F64B625-03DB-4303-9DF5-64950424A851"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2013-10-25:*:*:*:*:*:*:*","matchCriteriaId":"A6FE1F55-879F-4A20-A00C-91F629B8327D"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2013-11-06:*:*:*:*:*:*:*","matchCriteriaId":"F73E3573-8106-47DD-9805-CE83B511B520"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2013-11-10:*:*:*:*:*:*:*","matchCriteriaId":"C8175E96-F154-46F8-A36D-A54FAE855DF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2013-11-14:*:*:*:*:*:*:*","matchCriteriaId":"8770BE3D-E999-4F28-ABA0-513485371A6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2013-11-15:*:*:*:*:*:*:*","matchCriteriaId":"DC044B52-01E2-4E64-B3A1-1D5B9986BF58"},{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2013-11-25:*:*:*:*:*:*:*","matchCriteriaId":"0FE98301-634B-4FD8-9DDC-F60D4320AB50"}]}]}],"references":[{"url":"http://isecpartners.github.io/fuzzing/vulnerabilities/2013/12/30/vlc-vulnerability.html","source":"cve@mitre.org"},{"url":"http://www.live555.com/liveMedia/public/changelog.txt","source":"cve@mitre.org"},{"url":"http://isecpartners.github.io/fuzzing/vulnerabilities/2013/12/30/vlc-vulnerability.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.live555.com/liveMedia/public/changelog.txt","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2013-6934","sourceIdentifier":"cve@mitre.org","published":"2014-01-23T21:55:04.947","lastModified":"2026-06-17T00:01:09.290","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The parseRTSPRequestString function in Live Networks Live555 Streaming Media 2013.11.26, as used in VideoLAN VLC Media Player, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a space character at the beginning of an RTSP message, which triggers an integer underflow, infinite loop, and buffer overflow.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-6933."},{"lang":"es","value":"La función parseRTSPRequestString en Live Networks Live555 Streaming Media 2013.11.26, tal como se usa en VideoLAN VLC Media Player, permite a atacantes remotos provocar una denegación de servicio (caída) y posiblemente ejecutar código arbitrario a través de un carácter en blanco en el comienzo de un mensaje RTSP, lo que desencadena en un underflow de enteros, bucle infinito, y desbordamiento de búfer. NOTA: esta vulnerabilidad existe por una solución incompleta en CVE-2013-6933."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2013-11-26:*:*:*:*:*:*:*","matchCriteriaId":"DCB033D9-C10C-428C-A7EF-DCF113967A19"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc_media_player:*:*:*:*:*:*:*:*","versionEndExcluding":"2.1.0","matchCriteriaId":"1CC766DE-C9B4-4067-B90F-37DBB63EEFE0"}]}]}],"references":[{"url":"http://isecpartners.github.io/fuzzing/vulnerabilities/2013/12/30/vlc-vulnerability.html","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"]},{"url":"http://www.live555.com/liveMedia/public/changelog.txt","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/65139","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://isecpartners.github.io/fuzzing/vulnerabilities/2013/12/30/vlc-vulnerability.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]},{"url":"http://www.live555.com/liveMedia/public/changelog.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/65139","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2018-4013","sourceIdentifier":"talos-cna@cisco.com","published":"2018-10-19T13:29:00.680","lastModified":"2026-06-17T01:58:13.077","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An exploitable code execution vulnerability exists in the HTTP packet-parsing functionality of the LIVE555 RTSP server library version 0.92. A specially crafted packet can cause a stack-based buffer overflow, resulting in code execution. An attacker can send a packet to trigger this vulnerability."},{"lang":"es","value":"Existe una vulnerabilidad explotable de ejecución de código en la funcionalidad HTTP packet-parsing de la biblioteca del servidor LIVE555 RTSP en su versión 0.92. Un paquete especialmente manipulado puede provocar un desbordamiento de búfer basado en pila que daría lugar a la ejecución de código. Un atacante puede enviar un paquete para provocar esta vulnerabilidad."}],"affected":[{"source":"talos-cna@cisco.com","affectedData":[{"vendor":"Live Networks","product":"LIVE555 Media Server","versions":[{"version":"Version 0.92","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV30":[{"source":"talos-cna@cisco.com","type":"Secondary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","baseScore":10.0,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":6.0}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:live555:live555_media_server:0.92:*:*:*:*:*:*:*","matchCriteriaId":"7009CDF5-615D-4108-A297-7EFF77E6522A"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*","matchCriteriaId":"DEECE5FC-CACF-4496-A3E7-164736409252"}]}]}],"references":[{"url":"http://lists.live555.com/pipermail/live-devel/2018-October/021071.html","source":"talos-cna@cisco.com","tags":["Mailing List","Third Party Advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2018/11/msg00020.html","source":"talos-cna@cisco.com","tags":["Mailing List","Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/202005-06","source":"talos-cna@cisco.com","tags":["Third Party Advisory"]},{"url":"https://talosintelligence.com/vulnerability_reports/TALOS-2018-0684","source":"talos-cna@cisco.com","tags":["Exploit","Third Party Advisory"]},{"url":"https://www.debian.org/security/2018/dsa-4343","source":"talos-cna@cisco.com","tags":["Third Party Advisory"]},{"url":"http://lists.live555.com/pipermail/live-devel/2018-October/021071.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2018/11/msg00020.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/202005-06","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://talosintelligence.com/vulnerability_reports/TALOS-2018-0684","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]},{"url":"https://www.debian.org/security/2018/dsa-4343","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2019-6256","sourceIdentifier":"cve@mitre.org","published":"2019-01-14T08:29:00.427","lastModified":"2026-06-17T02:38:53.613","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A Denial of Service issue was discovered in the LIVE555 Streaming Media libraries as used in Live555 Media Server 0.93. It can cause an RTSPServer crash in handleHTTPCmd_TunnelingPOST, when RTSP-over-HTTP tunneling is supported, via x-sessioncookie HTTP headers in a GET request and a POST request within the same TCP session. This occurs because of a call to an incorrect virtual function pointer in the readSocket function in GroupsockHelper.cpp."},{"lang":"es","value":"Se ha descubierto una denegación de servicio (DoS) en las librerías Live555 Streaming Media tal y como se utilizan en la versión 0.93 de Live555 Media Server. Esto puede provocar el cierre inesperado de \"RTSPServer\" en handleHTTPCmd_TunnelingPOST cuando \"tunneling\" RTSP-over-HTTP es soportado mediante cabeceras HTTP en una petición GET dentro de la misma sesión TCP. Esto ocurre debido a una llamada al puntero de una función virtual incorrecto en la función readSocket en GroupsockHelper.cpp."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-755"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:live555:live555_media_server:0.93:*:*:*:*:*:*:*","matchCriteriaId":"948E5448-F51A-4C86-BDC8-947815B725A9"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*","matchCriteriaId":"DEECE5FC-CACF-4496-A3E7-164736409252"}]}]}],"references":[{"url":"https://github.com/rgaufman/live555/issues/19","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2019/02/msg00037.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"https://seclists.org/bugtraq/2019/Mar/22","source":"cve@mitre.org","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/202005-06","source":"cve@mitre.org"},{"url":"https://www.debian.org/security/2019/dsa-4408","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://github.com/rgaufman/live555/issues/19","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2019/02/msg00037.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"https://seclists.org/bugtraq/2019/Mar/22","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/202005-06","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.debian.org/security/2019/dsa-4408","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2019-7314","sourceIdentifier":"cve@mitre.org","published":"2019-02-04T02:29:00.247","lastModified":"2026-06-17T02:40:26.437","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"liblivemedia in Live555 before 2019.02.03 mishandles the termination of an RTSP stream after RTP/RTCP-over-RTSP has been set up, which could lead to a Use-After-Free error that causes the RTSP server to crash (Segmentation fault) or possibly have unspecified other impact."},{"lang":"es","value":"liblivemedia en Live555, antes del 03/02/2019, gestiona de manera incorrecta la terminación de una transmisión RTSP después de que RTP/RTCP-over-RTSP se configura, lo que podría provocar un error de uso de memoria previamente liberada que causa el cierre inesperado del servidor RTSP (fallo de segmentación) o potencialmente tiene otro impacto no especificado."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-416"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:*:*:*:*:*:*:*:*","versionEndExcluding":"0.95","matchCriteriaId":"6BF3B1D8-8081-4080-B68B-0AD7D4D3D1CC"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]}],"references":[{"url":"http://lists.live555.com/pipermail/live-devel/2019-February/021143.html","source":"cve@mitre.org","tags":["Mailing List","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00044.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00024.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00009.html","source":"cve@mitre.org"},{"url":"http://www.live555.com/liveMedia/public/changelog.txt","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2019/02/msg00037.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"https://seclists.org/bugtraq/2019/Mar/22","source":"cve@mitre.org"},{"url":"https://security.gentoo.org/glsa/202005-06","source":"cve@mitre.org"},{"url":"https://www.debian.org/security/2019/dsa-4408","source":"cve@mitre.org"},{"url":"http://lists.live555.com/pipermail/live-devel/2019-February/021143.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00044.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00024.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00009.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.live555.com/liveMedia/public/changelog.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2019/02/msg00037.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"https://seclists.org/bugtraq/2019/Mar/22","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/202005-06","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.debian.org/security/2019/dsa-4408","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2019-7732","sourceIdentifier":"cve@mitre.org","published":"2019-02-11T17:29:00.443","lastModified":"2026-06-17T02:40:54.813","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"In Live555 0.95, a setup packet can cause a memory leak leading to DoS because, when there are multiple instances of a single field (username, realm, nonce, uri, or response), only the last instance can ever be freed."},{"lang":"es","value":"En Live555 0.95, un paquete de instalación puede provocar una fuga de memoria y una denegación de servicio (DoS). Esto se debe a que, cuando hay múltiples instancias de un único campo (username, realm, nonce, uri o response), solo se puede liberar la última instancia."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-401"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:0.95:*:*:*:*:*:*:*","matchCriteriaId":"D7EFF72B-05B5-48D0-B5AA-C8BFD85F2CBE"}]}]}],"references":[{"url":"https://github.com/rgaufman/live555/issues/20","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://github.com/rgaufman/live555/issues/20","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2019-7733","sourceIdentifier":"cve@mitre.org","published":"2019-02-11T17:29:00.490","lastModified":"2026-06-17T02:40:54.923","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"In Live555 0.95, there is a buffer overflow via a large integer in a Content-Length HTTP header because handleRequestBytes has an unrestricted memmove."},{"lang":"es","value":"En Live555 0.95, hay un desbordamiento de búfer mediante un entero largo en una cabecera HTTP Content-Length debido a que handleRequestBytes tiene un memmove no restringido."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-190"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:0.95:*:*:*:*:*:*:*","matchCriteriaId":"D7EFF72B-05B5-48D0-B5AA-C8BFD85F2CBE"}]}]}],"references":[{"url":"https://github.com/rgaufman/live555/issues/21","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/202005-06","source":"cve@mitre.org"},{"url":"https://github.com/rgaufman/live555/issues/21","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/202005-06","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2019-9215","sourceIdentifier":"cve@mitre.org","published":"2019-02-28T04:29:00.450","lastModified":"2026-06-17T02:43:22.420","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"In Live555 before 2019.02.27, malformed headers lead to invalid memory access in the parseAuthorizationHeader function."},{"lang":"es","value":"En Live555, antes del 27/02/2019, cabeceras mal formadas conducen a un acceso de memoria inválida en la función parseAuthorizationHeader."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:*:*:*:*:*:*:*:*","versionEndExcluding":"2019.02.27","matchCriteriaId":"52BDFAC3-D07D-487F-AAA3-1CE56E69E8A8"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:opensuse:backports_sle:15.0:-:*:*:*:*:*:*","matchCriteriaId":"D83DA865-E4A6-4FBF-AA1B-A969EBA6B2AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:opensuse:backports_sle:15.0:sp1:*:*:*:*:*:*","matchCriteriaId":"40513095-7E6E-46B3-B604-C926F1BA3568"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:*","matchCriteriaId":"F1E78106-58E6-4D59-990F-75DA575BFAD9"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*","matchCriteriaId":"B620311B-34A3-48A6-82DF-6F078D7A4493"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:leap:15.2:*:*:*:*:*:*:*","matchCriteriaId":"B009C22E-30A4-4288-BCF6-C3E81DEAF45A"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*","matchCriteriaId":"DEECE5FC-CACF-4496-A3E7-164736409252"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00044.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00024.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00009.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.live555.com/liveMedia/public/changelog.txt","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2019/03/msg00022.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"https://seclists.org/bugtraq/2019/Mar/22","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/202005-06","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://www.debian.org/security/2019/dsa-4408","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00044.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00024.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00009.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.live555.com/liveMedia/public/changelog.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2019/03/msg00022.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"https://seclists.org/bugtraq/2019/Mar/22","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/202005-06","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.debian.org/security/2019/dsa-4408","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2019-15232","sourceIdentifier":"cve@mitre.org","published":"2019-08-20T00:15:10.237","lastModified":"2026-06-17T02:19:54.157","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Live555 before 2019.08.16 has a Use-After-Free because GenericMediaServer::createNewClientSessionWithId can generate the same client session ID in succession, which is mishandled by the MPEG1or2 and Matroska file demultiplexors."},{"lang":"es","value":"Live555 versiones anteriores a 2019.08.16, presenta un uso de la memoria previamente liberada porque la función GenericMediaServer::createNewClientSessionWithId puede generar el mismo ID de sesión de cliente en sucesión, el cual es manejado inapropiadamente por los demultiplexores de archivos MPEG1or2 y Matroska."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-416"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:*:*:*:*:*:*:*:*","versionEndExcluding":"2019-08-16","matchCriteriaId":"485C442E-F46F-4515-A1A2-3044CFEAF01D"}]}]}],"references":[{"url":"http://www.live555.com/liveMedia/public/changelog.txt","source":"cve@mitre.org","tags":["Release Notes","Vendor Advisory"]},{"url":"https://security.gentoo.org/glsa/202005-06","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.live555.com/liveMedia/public/changelog.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes","Vendor Advisory"]},{"url":"https://security.gentoo.org/glsa/202005-06","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2021-28899","sourceIdentifier":"cve@mitre.org","published":"2021-04-29T15:15:10.987","lastModified":"2026-06-17T03:47:01.050","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in the AC3AudioFileServerMediaSubsession, ADTSAudioFileServerMediaSubsession, and AMRAudioFileServerMediaSubsessionLive OnDemandServerMediaSubsession subclasses in Networks LIVE555 Streaming Media before 2021.3.16."},{"lang":"es","value":"Una vulnerabilidad en las subclases AC3AudioFileServerMediaSubsession, ADTSAudioFileServerMediaSubsession y AMRAudioFileServerMediaSubsessionLive OnDemandServerMediaSubsession en redes LIVE555 Streaming Media versiones anteriores a 2021.3.16"}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:*:*:*:*:*:*:*:*","versionEndExcluding":"2021.3.16","matchCriteriaId":"6A3FA48C-510C-481C-8091-C3FF9412F577"}]}]}],"references":[{"url":"http://lists.live555.com/pipermail/live-devel/2021-March/021891.html","source":"cve@mitre.org","tags":["Mailing List","Vendor Advisory"]},{"url":"http://lists.live555.com/pipermail/live-devel/2021-March/021891.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-38380","sourceIdentifier":"cve@mitre.org","published":"2021-08-10T18:15:07.347","lastModified":"2026-06-17T04:01:59.157","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Live555 through 1.08 mishandles huge requests for the same MP3 stream, leading to recursion and s stack-based buffer over-read. An attacker can leverage this to launch a DoS attack."},{"lang":"es","value":"Live555 versiones hasta 1.08, no maneja apropiadamente grandes peticiones para el mismo flujo de MP3, conllevando a una recursión y una lectura excesiva del búfer en la región stack de la memoria. Un atacante puede aprovechar esto para lanzar un ataque DoS"}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-125"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:live555:live555:*:*:*:*:*:*:*:*","versionEndExcluding":"2021.08.04","matchCriteriaId":"AB55807C-0F36-4097-A2BE-299BB1380D41"}]}]}],"references":[{"url":"http://lists.live555.com/pipermail/live-devel/2021-August/021954.html","source":"cve@mitre.org","tags":["Exploit","Mailing List","Vendor Advisory"]},{"url":"http://www.live555.com/liveMedia/public/changelog.txt#%5B2021.08.04%5D","source":"cve@mitre.org"},{"url":"http://lists.live555.com/pipermail/live-devel/2021-August/021954.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Mailing List","Vendor Advisory"]},{"url":"http://www.live555.com/liveMedia/public/changelog.txt#%5B2021.08.04%5D","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2021-38381","sourceIdentifier":"cve@mitre.org","published":"2021-08-10T18:15:07.387","lastModified":"2026-06-17T04:01:59.280","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Live555 through 1.08 does not handle MPEG-1 or 2 files properly. Sending two successive RTSP SETUP commands for the same track causes a Use-After-Free and daemon crash."},{"lang":"es","value":"Live555 versiones hasta 1.08, no maneja apropiadamente los archivos MPEG-1 o 2. El envío de dos comandos RTSP SETUP sucesivos para la misma pista provoca un Uso de la Memoria previamente Liberada y un bloqueo del demonio"}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-416"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:live555:live555:*:*:*:*:*:*:*:*","versionEndExcluding":"2021.08.09","matchCriteriaId":"79BE78C8-3A6D-45D1-9F52-DB9D0A8CA0D2"}]}]}],"references":[{"url":"http://lists.live555.com/pipermail/live-devel/2021-August/021961.html","source":"cve@mitre.org","tags":["Exploit","Mailing List","Vendor Advisory"]},{"url":"http://www.live555.com/liveMedia/public/changelog.txt#%5B2021.08.09%5D","source":"cve@mitre.org"},{"url":"http://lists.live555.com/pipermail/live-devel/2021-August/021961.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Mailing List","Vendor Advisory"]},{"url":"http://www.live555.com/liveMedia/public/changelog.txt#%5B2021.08.09%5D","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2021-38382","sourceIdentifier":"cve@mitre.org","published":"2021-08-10T18:15:07.427","lastModified":"2026-06-17T04:01:59.397","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Live555 through 1.08 does not handle Matroska and Ogg files properly. Sending two successive RTSP SETUP commands for the same track causes a Use-After-Free and daemon crash."},{"lang":"es","value":"Live555 versiones hasta 1.08, no maneja apropiadamente los archivos Matroska y Ogg. El envío de dos comandos RTSP SETUP sucesivos para la misma pista causa un Uso de la Memoria previamente Liberada y un bloqueo del demonio"}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-416"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:live555:live555:*:*:*:*:*:*:*:*","versionEndExcluding":"2021.08.06","matchCriteriaId":"273E5D2E-D8DC-4155-A1BF-3353CA4B02DE"}]}]}],"references":[{"url":"http://lists.live555.com/pipermail/live-devel/2021-August/021959.html","source":"cve@mitre.org","tags":["Exploit","Mailing List","Vendor Advisory"]},{"url":"http://www.live555.com/liveMedia/public/changelog.txt#%5B2021.08.06%5D","source":"cve@mitre.org"},{"url":"http://lists.live555.com/pipermail/live-devel/2021-August/021959.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Mailing List","Vendor Advisory"]},{"url":"http://www.live555.com/liveMedia/public/changelog.txt#%5B2021.08.06%5D","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2021-39282","sourceIdentifier":"cve@mitre.org","published":"2021-08-18T17:15:09.230","lastModified":"2026-06-17T04:03:27.903","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Live555 through 1.08 has a memory leak in AC3AudioStreamParser for AC3 files."},{"lang":"es","value":"Live555 versiones hasta 1.08, presenta una pérdida de memoria en la función AC3AudioStreamParser para archivos AC3."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-401"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:live555:live555:*:*:*:*:*:*:*:*","versionEndIncluding":"1.08","matchCriteriaId":"AC5D5907-70E1-4D18-A73A-CC0E0AD83965"}]}]}],"references":[{"url":"http://lists.live555.com/pipermail/live-devel/2021-August/021970.html","source":"cve@mitre.org","tags":["Exploit","Mailing List","Vendor Advisory"]},{"url":"http://www.live555.com/liveMedia/public/changelog.txt#%5B2021.08.13%5D","source":"cve@mitre.org"},{"url":"http://lists.live555.com/pipermail/live-devel/2021-August/021970.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Mailing List","Vendor Advisory"]},{"url":"http://www.live555.com/liveMedia/public/changelog.txt#%5B2021.08.13%5D","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2021-39283","sourceIdentifier":"cve@mitre.org","published":"2021-08-18T17:15:09.263","lastModified":"2026-06-17T04:03:28.020","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"liveMedia/FramedSource.cpp in Live555 through 1.08 allows an assertion failure and application exit via multiple SETUP and PLAY commands."},{"lang":"es","value":"El archivo liveMedia/FramedSource.cpp en Live555 versiones hasta 1.08, permite un fallo de aserción y la salida de la aplicación por medio de múltiples comandos SETUP y PLAY."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-617"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:live555:live555:*:*:*:*:*:*:*:*","versionEndIncluding":"1.08","matchCriteriaId":"AC5D5907-70E1-4D18-A73A-CC0E0AD83965"}]}]}],"references":[{"url":"http://lists.live555.com/pipermail/live-devel/2021-August/021969.html","source":"cve@mitre.org","tags":["Exploit","Mailing List","Vendor Advisory"]},{"url":"http://www.live555.com/liveMedia/public/changelog.txt#%5B2021.08.13%5D","source":"cve@mitre.org"},{"url":"http://lists.live555.com/pipermail/live-devel/2021-August/021969.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Mailing List","Vendor Advisory"]},{"url":"http://www.live555.com/liveMedia/public/changelog.txt#%5B2021.08.13%5D","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2021-41396","sourceIdentifier":"cve@mitre.org","published":"2022-07-12T14:15:14.797","lastModified":"2026-06-17T04:08:28.523","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Live555 through 1.08 does not handle socket connections properly. A huge number of incoming socket connections in a short time invokes the error-handling module, in which a heap-based buffer overflow happens. An attacker can leverage this to launch a DoS attack."},{"lang":"es","value":"Live555 versiones hasta 1.08, no maneja apropiadamente las conexiones de socket. Un gran número de conexiones de socket entrantes en poco tiempo invoca el módulo de administración de errores, en el que se produce un desbordamiento de búfer en la región heap de la memoria. Un atacante puede aprovechar esto para lanzar un ataque DoS"}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:live555:live555:*:*:*:*:*:*:*:*","versionEndIncluding":"1.08","matchCriteriaId":"AC5D5907-70E1-4D18-A73A-CC0E0AD83965"}]}]}],"references":[{"url":"http://lists.live555.com/pipermail/live-devel/2021-September/021994.html","source":"cve@mitre.org","tags":["Exploit","Mailing List","Vendor Advisory"]},{"url":"http://www.live555.com/liveMedia/public/changelog.txt","source":"cve@mitre.org","tags":["Release Notes","Vendor Advisory"]},{"url":"http://lists.live555.com/pipermail/live-devel/2021-September/021994.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Mailing List","Vendor Advisory"]},{"url":"http://www.live555.com/liveMedia/public/changelog.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-37117","sourceIdentifier":"cve@mitre.org","published":"2024-01-12T07:15:12.077","lastModified":"2026-06-17T06:07:36.393","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A heap-use-after-free vulnerability was found in live555 version 2023.05.10 while handling the SETUP."},{"lang":"es","value":"Se encontró una vulnerabilidad de use after free del montón en live555 versión 2023.05.10 mientras se manejaba el SETUP."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-03-26T19:49:06.518954Z","id":"CVE-2023-37117","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-416"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-416"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:live555:live555:2023.05.10:*:*:*:*:*:*:*","matchCriteriaId":"FD34412A-C903-4798-A9AF-8EE23BFBE493"}]}]}],"references":[{"url":"http://lists.live555.com/pipermail/live-devel/2023-June/022331.html","source":"cve@mitre.org","tags":["Exploit","Mailing List","Vendor Advisory"]},{"url":"http://www.live555.com/liveMedia/public/changelog.txt","source":"cve@mitre.org","tags":["Release Notes","Vendor Advisory"]},{"url":"http://lists.live555.com/pipermail/live-devel/2023-June/022331.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Mailing List","Vendor Advisory"]},{"url":"http://www.live555.com/liveMedia/public/changelog.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2025-65404","sourceIdentifier":"cve@mitre.org","published":"2025-12-01T16:15:57.170","lastModified":"2026-06-17T09:55:40.490","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A buffer overflow in the getSideInfo2() function of Live555 Streaming Media v2018.09.02 allows attackers to cause a Denial of Service (DoS) via a crafted MP3 stream."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-12-01T19:41:21.153310Z","id":"CVE-2025-65404","options":[{"exploitation":"poc"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-120"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2018-09-02:*:*:*:*:*:*:*","matchCriteriaId":"C9F01989-4E5A-42B7-8EF7-74E3A5335754"}]}]}],"references":[{"url":"https://github.com/rgaufman/live555","source":"cve@mitre.org","tags":["Product"]},{"url":"https://shimo.im/docs/16q8xMxpPlH8Z2q7","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2025-65405","sourceIdentifier":"cve@mitre.org","published":"2025-12-01T16:15:57.300","lastModified":"2026-06-17T09:55:40.650","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A use-after-free in the ADTSAudioFileSource::samplingFrequency() function of Live555 Streaming Media v2018.09.02 allows attackers to cause a Denial of Service (DoS) via supplying a crafted ADTS/AAC file."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-12-01T19:30:03.985274Z","id":"CVE-2025-65405","options":[{"exploitation":"poc"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-416"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2018-09-02:*:*:*:*:*:*:*","matchCriteriaId":"C9F01989-4E5A-42B7-8EF7-74E3A5335754"}]}]}],"references":[{"url":"https://github.com/rgaufman/live555","source":"cve@mitre.org","tags":["Product"]},{"url":"https://shimo.im/docs/25q5XMXpOwSr8w3D","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2025-65406","sourceIdentifier":"cve@mitre.org","published":"2025-12-01T17:15:50.260","lastModified":"2026-06-17T09:55:40.797","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A heap overflow in the MatroskaFile::createRTPSinkForTrackNumber() function of Live555 Streaming Media v2018.09.02 allows attackers to cause a Denial of Service (DoS) via supplying a crafted MKV file."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-12-01T19:50:04.959168Z","id":"CVE-2025-65406","options":[{"exploitation":"poc"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-122"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2018-09-02:*:*:*:*:*:*:*","matchCriteriaId":"C9F01989-4E5A-42B7-8EF7-74E3A5335754"}]}]}],"references":[{"url":"https://github.com/rgaufman/live555","source":"cve@mitre.org","tags":["Product"]},{"url":"https://shimo.im/docs/1lq7rMrp8lI1vW3e","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2025-65408","sourceIdentifier":"cve@mitre.org","published":"2025-12-01T17:15:50.407","lastModified":"2026-06-17T09:55:41.097","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A NULL pointer dereference in the ADTSAudioFileServerMediaSubsession::createNewRTPSink() function of Live555 Streaming Media v2018.09.02 allows attackers to cause a Denial of Service (DoS) via supplying a crafted ADTS file."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-12-01T19:30:36.082712Z","id":"CVE-2025-65408","options":[{"exploitation":"poc"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-476"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2018-09-02:*:*:*:*:*:*:*","matchCriteriaId":"C9F01989-4E5A-42B7-8EF7-74E3A5335754"}]}]}],"references":[{"url":"https://github.com/rgaufman/live555","source":"cve@mitre.org","tags":["Product"]},{"url":"https://shimo.im/docs/VMAPLVLp57SJ92Ag","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2025-65407","sourceIdentifier":"cve@mitre.org","published":"2025-12-01T19:15:52.417","lastModified":"2026-06-17T09:55:40.947","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A use-after-free in the MPEG1or2Demux::newElementaryStream() function of Live555 Streaming Media v2018.09.02 allows attackers to cause a Denial of Service (DoS) via supplying a crafted MPEG Program stream."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-12-01T19:24:15.753742Z","id":"CVE-2025-65407","options":[{"exploitation":"poc"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-416"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:live555:streaming_media:2018-09-02:*:*:*:*:*:*:*","matchCriteriaId":"C9F01989-4E5A-42B7-8EF7-74E3A5335754"}]}]}],"references":[{"url":"https://github.com/rgaufman/live555","source":"cve@mitre.org","tags":["Product"]},{"url":"https://shimo.im/docs/VMAPLVLpzZcZvoAg","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2026-1200","sourceIdentifier":"patrick@puiterwijk.org","published":"2026-02-18T21:16:23.070","lastModified":"2026-06-17T10:15:19.150","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A flaw was found in the rgaufman/live555 fork of live555. A remote attacker could exploit a segmentation fault, in the `increaseBufferTo` function. This vulnerability can lead to memory corruption problems and potentially other consequences."},{"lang":"es","value":"Se encontró un error en el fork rgaufman/live555 de live555. Un atacante remoto podría explotar un fallo de segmentación en la función 'increaseBufferTo'. Esta vulnerabilidad puede provocar problemas de corrupción de memoria y potencialmente otras consecuencias."}],"affected":[{"source":"patrick@puiterwijk.org","affectedData":[{"vendor":"https://github.com/rgaufman/live555","product":"rgaufman/live555","defaultStatus":"unaffected","collectionURL":"https://github.com/rgaufman/live555","packageName":"rgaufman/live555","versions":[{"version":"0","lessThan":"*","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"patrick@puiterwijk.org","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","baseScore":6.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":2.8,"impactScore":3.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-02-18T20:32:41.911600Z","id":"CVE-2026-1200","options":[{"exploitation":"poc"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"patrick@puiterwijk.org","type":"Secondary","description":[{"lang":"en","value":"CWE-824"}]}],"references":[{"url":"https://access.redhat.com/security/cve/CVE-2026-1200","source":"patrick@puiterwijk.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2430836","source":"patrick@puiterwijk.org"},{"url":"https://github.com/rgaufman/live555/issues/65","source":"patrick@puiterwijk.org"}]}},{"cve":{"id":"CVE-2026-41470","sourceIdentifier":"disclosure@vulncheck.com","published":"2026-05-19T19:16:50.440","lastModified":"2026-07-24T09:10:00.153","vulnStatus":"Awaiting Analysis","cveTags":[],"descriptions":[{"lang":"en","value":"LIVE555 before 2026.04.22 contains an authorization bypass vulnerability in RTSP session command handling that allows attackers to replay valid Session tokens from unauthenticated connections. Attackers who obtain a valid Session token can issue PLAY and TEARDOWN commands from a second TCP connection without authentication, causing server crashes through virtual function call errors or disrupting active streams by terminating victim sessions."},{"lang":"es","value":"LIVE555 anterior a 2026.04.22 contiene una vulnerabilidad de omisión de autorización en el manejo de comandos de sesión RTSP que permite a los atacantes reproducir tokens de sesión válidos desde conexiones no autenticadas. Los atacantes que obtienen un token de sesión válido pueden emitir comandos PLAY y TEARDOWN desde una segunda conexión TCP sin autenticación, causando caídas del servidor a través de errores de llamada a funciones virtuales o interrumpiendo transmisiones activas al terminar sesiones de víctimas."}],"affected":[{"source":"disclosure@vulncheck.com","affectedData":[{"vendor":"Live Networks, Inc.","product":"LIVE555","defaultStatus":"affected","versions":[{"version":"0","lessThan":"2026.04.22","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":8.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-05-20T14:03:45.166155Z","id":"CVE-2026-41470","options":[{"exploitation":"poc"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"disclosure@vulncheck.com","type":"Secondary","description":[{"lang":"en","value":"CWE-863"}]}],"references":[{"url":"https://download.live555.com/","source":"disclosure@vulncheck.com"},{"url":"https://gist.github.com/yhcho0405/ee9b67a96808ef19f22e8a4ee88c795f","source":"disclosure@vulncheck.com"},{"url":"https://www.vulncheck.com/advisories/live555-rtsp-server-authorization-bypass-via-session-token","source":"disclosure@vulncheck.com"}]}}]}