VDB
GCVE-110-MAGEIA-2019-29
GCVE-110-MAGEIA-2019-29
Advisory Published
A bug in the server implementation of RTSP-over-HTTP in live could allow
a denial-of-service attack.
A bug in the server implementation of RTSP-over-HTTP could allow a
buffer overflow, which could result in the execution of arbitrary code
when parsing a malformed RTSP stream (CVE-2018-4013).
The flv_write_packet function in libavformat/flvenc.c in FFmpeg through
3.3.8 does not check for an empty audio packet, leading to an assertion
failure (CVE-2018-15822).
The live package has been updated to version 2018.11.26, the ffmpeg
package has been updated to version 3.3.9, and the vlc package has been
updated to version 3.0.5, fixing these issues and other bugs.
The mplayer package has been rebuilt against the update live package to
fix the RTSP-over-HTTP issues in mplayer.
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| Mageia | vlc | 0 (affected), 0 (affected), 3.0.5-2.mga6.tainted (unaffected), 3.0.5-2.mga6 (unaffected), 0 (affected), 3.0.5-2.mga6 (unaffected), 0 (affected), 3.0.5-2.mga6.tainted (unaffected) | — |
| Mageia | live | 0 (affected), 2018.11.26-1.mga6 (unaffected), 0 (affected), 2018.11.26-1.mga6 (unaffected) | — |
| Mageia | firefox-l10n | 0 (affected), 60.6.2-1.mga6 (unaffected) | — |
| Mageia | mplayer | 1.3.0-13.mga6 (unaffected), 0 (affected), 1.3.0-13.mga6.tainted (unaffected), 0 (affected), 0 (affected), 0 (affected), 1.3.0-13.mga6.tainted (unaffected), 1.3.0-13.mga6 (unaffected) | — |
| Mageia | ffmpeg | 0 (affected), 3.3.9-1.mga6.tainted (unaffected), 3.3.9-1.mga6 (unaffected), 0 (affected), 3.3.9-1.mga6.tainted (unaffected), 0 (affected), 3.3.9-1.mga6 (unaffected), 0 (affected) | — |
| Mageia | firefox | 60.6.2-1.mga6 (unaffected), 0 (affected) | — |
Aliases
References
Browse GCVE Records
73,738 records in the GCVE database · Updated July 19, 2026
No matching records found.
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.