CVE-2019-7314

liblivemedia in Live555 before 2019.02.03 mishandles the termination of an RTSP stream after RTP/RTCP-over-RTSP has been set up, which could lead to a…

published February 4, 2019

CVSS
—
EPSS
3%
Percentile
88.0
In the wild
Unconfirmed
What it is

⚠️ A classic case of mismanaging stream termination! When handling RTSP streams, liblivemedia before version 2019.02.03 can trip over itself, causing a potentially devastating crash. 😱 Imagine a restaurant that doesn't properly close down the kitchen after a busy night, leaving pots on the stove that could boil over and cause a mess — that's what happens here when the stream is terminated incorrectly! When the server tries to clean up after itself, it stumbles into a Use-After-Free error. This can lead to a segmentation fault, causing the RTSP server to crash and potentially disrupt services relying on it, leaving users in the lurch.

Put simply

Imagine a restaurant that doesn't properly close down the kitchen after a busy night, leaving pots on the stove that could boil over and cause a mess — that's what happens here when the stream is terminated incorrectly! The vulnerability in liblivemedia mishandles the termination of an RTSP stream after RTP/RTCP-over-RTSP has been established, leading to a Use-After-Free condition that can crash the RTSP server.

What to do

When the server tries to clean up after itself, it stumbles into a Use-After-Free error. This can lead to a segmentation fault, causing the RTSP server to crash and potentially disrupt services relying on it, leaving users in the lurch. To protect your services, upgrade liblivemedia to version 2019.02.03 or newer. Regularly monitor your environment for updates and test your RTSP implementations to ensure they handle stream terminations gracefully. 🛡️ You've got this! With a quick update, you'll bolster your RTSP server's resilience in no time! 🚀

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03192 · 88.0th percentile
Published
2019-02-04T02:00Z
EPSS history
Timeline
  • 04 FEB 02:00Z
    liblivemedia in Live555 before 2019.02.03 mishandles the termination of an RTSP stream after RTP/RTCP-over-RTSP has been set up, which could lead to a…
    cvelistv5