Vulnerability Description
In Live555 0.95, a setup packet can cause a memory leak leading to DoS because, when there are multiple instances of a single field (username, realm, nonce, uri, or response), only the last instance can ever be freed.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Live555 | Streaming Media | 0.95 |
Related Weaknesses (CWE)
References
- https://github.com/rgaufman/live555/issues/20Third Party Advisory
- https://github.com/rgaufman/live555/issues/20Third Party Advisory
FAQ
What is CVE-2019-7732?
CVE-2019-7732 is a vulnerability with a CVSS score of 7.5 (HIGH). In Live555 0.95, a setup packet can cause a memory leak leading to DoS because, when there are multiple instances of a single field (username, realm, nonce, uri, or response), only the last instance c...
How severe is CVE-2019-7732?
CVE-2019-7732 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2019-7732?
Check the references section above for vendor advisories and patch information. Affected products include: Live555 Streaming Media.