CVE-2021-38381 PUBLISHED CVSS 6.5 MEDIUM

Live555 through 1.08 does not handle MPEG-1 or 2 files properly. Sending two successive RTSP SETUP commands for the same track causes a Use-After-Free and daemon crash.

EPSS 0.22% · 45.0th percentile

Risk Scores

CVSS v3.1
6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
EPSS Score
0.22%
45.0th percentile

Affected Products

VendorProductVersions
live555live5550
n/an/an/a

Timeline

References

Open in Interactive Console →