CVE-2019-9215
In Live555 before 2019.02.27, malformed headers lead to invalid memory ...
Kaynağa göre önem derecesi
Trivy'nin kendi etiketi CRITICAL. Kritik diyenler: NVD. Daha düşük diyenler: Ubuntu (orta).
Açıklama
In Live555 before 2019.02.27, malformed headers lead to invalid memory access in the parseAuthorizationHeader function.
Etkilenen paketler ve düzeltilmiş sürümler
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| debian 14 | liblivemedia | 2018.11.26-1.1 |
| debian 8 | liblivemedia | 2014.01.13-1+deb8u3 |
| debian 9 | liblivemedia | 2016.11.28-1+deb9u2 |
| ubuntu 16.04-ESM | liblivemedia | 2016.02.09-1ubuntu0.1~esm1 |
| ubuntu 18.04-ESM | liblivemedia | 2018.02.18-1ubuntu0.1~esm1 |
Referanslar
- http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00044.html
- http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00024.html
- http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00009.html
- http://www.live555.com/liveMedia/public/changelog.txt
- https://lists.debian.org/debian-lts-announce/2019/03/msg00022.html
- https://seclists.org/bugtraq/2019/Mar/22
- https://security.gentoo.org/glsa/202005-06
- https://ubuntu.com/security/notices/USN-4853-1