Back to overview

CVE-2018-4013

CRITICAL
10.0
CVSS 3.0
Description
An exploitable code execution vulnerability exists in the HTTP packet-parsing functionality of the LIVE555 RTSP server library version 0.92. A specially crafted packet can cause a stack-based buffer overflow, resulting in code execution. An attacker can send a packet to trigger this vulnerability.

Metadata

CVE ID
CVE-2018-4013
State
PUBLISHED
Assigner
talos
Reserved
2018-01-02 00:00 UTC
Published
2018-10-19 13:00 UTC
Last updated
2024-09-16 22:24 UTC
Vendor / Product
Live Networks / LIVE555 Media Server
Sources
cve.org  ·  NVD

Severity & Metrics

10.0 CRITICAL CVSS 3.0
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Affected products (1)
VendorProductPlatformVersions
Live Networks LIVE555 Media Server — Version 0.92
Weakness (CWE)
CWESourceDescription
— cna Stack-based buffer overflow
CVSS scores (1)
ScoreSeverityVersionSourceVector
10.0 CRITICAL 3.0 cna CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
References (5)
Back to overview