VDB

CVE-2018-4013

CVE-2018-4013 PUBLISHED

An exploitable code execution vulnerability exists in the HTTP packet-parsing functionality of the LIVE555 RTSP server library version 0.92. A specially crafted packet can cause a stack-based buffer overflow, resulting in code execution. An attacker can send a packet to trigger this vulnerability.

EPSS 50.53% · 97.9th percentile

Risk Scores

EPSS Score
50.53%
97.9th percentile

Affected Products

VendorProductVersions
Ubuntu:Pro:18.04:LTSliblivemedia2018.01.29-1, 0, 2017.07.18-1
Ubuntu:14.04:LTSliblivemedia2013.04.30-1ubuntu1, 0, 2013.04.30-1
Ubuntu:Pro:16.04:LTSliblivemedia2016.01.29-2, 2016.02.09-1, 2014.01.13-1

Exploit Intelligence

…and 13 more exploits

Timeline

  • Oct 19, 2018 CVE Published
  • Apr 14, 2021 EPSS Score
  • Aug 24, 2021 EPSS Score
  • Oct 26, 2021 EPSS Score
  • Feb 4, 2022 EPSS Score
  • Feb 28, 2022 EPSS Score
  • Jul 3, 2022 EPSS Score
  • Sep 5, 2022 EPSS Score
  • Jan 8, 2023 EPSS Score
  • Mar 7, 2023 EPSS Score
  • May 13, 2023 EPSS Score
  • Sep 15, 2023 EPSS Score

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›