Input validation error in LIVE555 Media Server - CVE-2019-6256
Published: January 21, 2019
Vulnerability identifier: #VU17101
CSH Severity: Low
CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2019-6256
CWE-ID: CWE-20
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to a call to an incorrect virtual function pointer in the readSocket function in GroupsockHelper.cpp. A remote attacker can cause an RTSPServer crash in handleHTTPCmd_TunnelingPOST, when RTSP-over-HTTP tunneling is supported, via x-sessioncookie HTTP headers in a GET request and a POST request within the same TCP session.
Affected software
LIVE555 Media Server
Gentoo Linux
Opensuse
Ubuntu
liblivemedia50 (Ubuntu package)
liblivemedia (Debian package)
liblivemedia62 (Ubuntu package)
Gentoo Linux
Opensuse
Ubuntu
liblivemedia50 (Ubuntu package)
liblivemedia (Debian package)
liblivemedia62 (Ubuntu package)
How to mitigate CVE-2019-6256
Install updates from vendor's website.
liblivemedia50 (Ubuntu package) - update to 2016.02.09-1ubuntu0.1~esm1
liblivemedia (Debian package) - update to 2016.11.28-1+deb9u2
liblivemedia62 (Ubuntu package) - update to 2018.02.18-1ubuntu0.1~esm1
liblivemedia (Debian package) - update to 2016.11.28-1+deb9u2
liblivemedia62 (Ubuntu package) - update to 2018.02.18-1ubuntu0.1~esm1