GLSA
Advocate
Joined: 12 May 2004
Posts: 2663
|
 Posted: Thu Mar 13, 2008 10:26 pm Post subject: [ GLSA 200803-22 ] LIVE555 Media Server: Denial of Service |
 |
|
Gentoo Linux Security Advisory
Title: LIVE555 Media Server: Denial of Service (GLSA 200803-22)
Severity: normal
Exploitable: remote
Date: March 13, 2008
Bug(s): #204065
ID: 200803-22
Synopsis
A Denial of Service vulnerability has been reported in LIVE555 Media Server.
Background
LIVE555 Media Server is a set of libraries for multimedia streaming.
Affected Packages
Package: media-plugins/live
Vulnerable: < 2008.02.08
Unaffected: >= 2008.02.08
Architectures: All supported architectures
Description
Luigi Auriemma reported a signedness error in the parseRTSPRequestString() function when processing short RTSP queries.
Impact
A remote attacker could send a specially crafted RTSP query to the vulnerable server, resulting in a crash.
Workaround
There is no known workaround at this time.
Resolution
All LIVE555 Media Server users should upgrade to the latest version: | Code: | # emerge --sync
# emerge --ask --oneshot --verbose ">=media-plugins/live-2008.02.08" |
Note: Due to ABI changes, applications built against LIVE555 Media Server such as VLC or MPlayer should also be rebuilt.
References
CVE-2007-6036
Last edited by GLSA on Wed Jul 29, 2009 4:18 am; edited 2 times in total |
|
News & Announcements
