Joined: 12 May 2004
|Posted: Thu Mar 13, 2008 10:26 pm Post subject: [ GLSA 200803-22 ] LIVE555 Media Server: Denial of Service
|Gentoo Linux Security Advisory
Title: LIVE555 Media Server: Denial of Service (GLSA 200803-22)
Date: March 13, 2008
A Denial of Service vulnerability has been reported in LIVE555 Media Server.
LIVE555 Media Server is a set of libraries for multimedia streaming.
Vulnerable: < 2008.02.08
Unaffected: >= 2008.02.08
Architectures: All supported architectures
Luigi Auriemma reported a signedness error in the parseRTSPRequestString() function when processing short RTSP queries.
A remote attacker could send a specially crafted RTSP query to the vulnerable server, resulting in a crash.
There is no known workaround at this time.
All LIVE555 Media Server users should upgrade to the latest version:
Note: Due to ABI changes, applications built against LIVE555 Media Server such as VLC or MPlayer should also be rebuilt.
|# emerge --sync
# emerge --ask --oneshot --verbose ">=media-plugins/live-2008.02.08"
Last edited by GLSA on Wed Jul 29, 2009 4:18 am; edited 2 times in total