CVE-2021-38380

Live555 through 1.08 mishandles huge requests for the same MP3 stream, leading to recursion and s stack-based buffer over-read

published August 10, 2021

CVSS
—
EPSS
2%
Percentile
74.6
In the wild
Unconfirmed
What it is

Live555 through 1.08 mishandles huge requests for the same MP3 stream, leading to recursion and s stack-based buffer over-read. An attacker can leverage this to launch a DoS attack.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01532 · 74.6th percentile
Published
2021-08-10T17:16Z
EPSS history
Timeline
  • 10 AUG 17:16Z
    Live555 through 1.08 mishandles huge requests for the same MP3 stream, leading to recursion and s stack-based buffer over-read
    cvelistv5