VDB
GCVE-110-MAGEIA-2019-121
GCVE-110-MAGEIA-2019-121
Advisory Published
The updated live, mplayer, vlc packages fix security vulnerabilities:
liblivemedia in Live555 before 2019.02.03 mishandles the termination of an
RTSP stream after RTP/RTCP-over-RTSP has been set up, which could lead to
a Use-After-Free error that causes the RTSP server to crash (Segmentation
fault) or possibly have unspecified other impact. (CVE-2019-7314)
In Live555 before 2019.02.27, malformed headers lead to invalid memory
access in the parseAuthorizationHeader function. (CVE-2019-9215)
Mplayer and VLC has been rebuilt against new live packages.
Also, VLC has been updated to version 3.0.6.
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| Mageia | vlc | 0 (affected), 3.0.6-1.mga6 (unaffected), 0 (affected), 3.0.6-1.mga6.tainted (unaffected), 0 (affected), 3.0.6-1.mga6 (unaffected), 3.0.6-1.mga6.tainted (unaffected), 0 (affected) | — |
| Mageia | live | 0 (affected), 2019.03.06-1.mga6 (unaffected), 0 (affected), 2019.03.06-1.mga6 (unaffected) | — |
| Mageia | mplayer | 0 (affected), 1.3.0-14.mga6.tainted (unaffected), 0 (affected), 1.3.0-14.mga6 (unaffected), 0 (affected), 1.3.0-14.mga6 (unaffected), 0 (affected), 1.3.0-14.mga6.tainted (unaffected) | — |
| Mageia | qtbase5 | 0 (affected), 5.12.2-2.1.mga7 (unaffected) | — |
Aliases
References
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.