CVE-2021-38382

medium

Description

Live555 through 1.08 does not handle Matroska and Ogg files properly. Sending two successive RTSP SETUP commands for the same track causes a Use-After-Free and daemon crash.

References

http://www.live555.com/liveMedia/public/changelog.txt#%5B2021.08.06%5D

http://lists.live555.com/pipermail/live-devel/2021-August/021959.html

Details

Source: Mitre, NVD

Published: 2021-08-10

Updated: 2023-11-07

Risk Information

CVSS v2

Base Score: 4.3

Vector: CVSS2#AV:N/AC:M/Au:N/C:N/I:N/A:P

Severity: Medium

CVSS v3

Base Score: 6.5

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H