CVE-2018-4013: Buffer Overflow
An exploitable code execution vulnerability exists in the HTTP packet-parsing functionality of the LIVE555 RTSP server library version 0.92. A specially crafted packet can cause a stack-based buffer overflow, resulting in code execution. An attacker can send a packet to trigger this vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2018-4013?
CVE-2018-4013 is an exploitable code execution vulnerability in the HTTP packet-parsing functionality of the LIVE555 RTSP server library version 0.92.
What is the severity of CVE-2018-4013?
CVE-2018-4013 has a severity rating of 9.8 (Critical).
How does CVE-2018-4013 work?
CVE-2018-4013 can be triggered by sending a specially crafted packet to the vulnerable server, causing a stack-based buffer overflow and resulting in code execution.
Which software versions are affected by CVE-2018-4013?
The affected versions include LIVE555 RTSP server library version 0.92, liblivemedia package version 2018.11.26-1.1 on Debian, and Live555 Media Server version 0.92.
How can CVE-2018-4013 be fixed?
To fix CVE-2018-4013, users should update their software to the patched versions, such as liblivemedia package version 2018.11.26-1.1 on Debian, which contains the necessary remedy.