CVE-2019-15232: Use After Free

Q: What is CVE-2019-15232?

CVE-2019-15232 is a Use-After-Free vulnerability in Live555 Streaming Media before 2019.08.16.

Q: How severe is CVE-2019-15232?

CVE-2019-15232 has a severity rating of 9.8 (Critical).

Q: How can CVE-2019-15232 be exploited?

CVE-2019-15232 can be exploited when the GenericMediaServer::createNewClientSessionWithId function generates the same client session ID in succession.

Q: What is the impact of CVE-2019-15232?

The Use-After-Free vulnerability in Live555 before 2019.08.16 can lead to a security breach where an attacker can execute arbitrary code or cause a denial of service.

Q: How can I fix CVE-2019-15232?

To fix CVE-2019-15232, update Live555 Streaming Media to version 2019.08.16 or later.

Published Aug 19, 2019

Updated

Live555 before 2019.08.16 has a Use-After-Free because GenericMediaServer::createNewClientSessionWithId can generate the same client session ID in succession, which is mishandled by the MPEG1or2 and Matroska file demultiplexors.

Affected Software

1 affected component

Live555 Streaming Media<2019-08-16

Event History

Aug 19, 2019

CVE Published

via MITRE·11:57 PM

Data Sourced

via MITRE·11:57 PM

Description

Frequently Asked Questions

What is CVE-2019-15232?

CVE-2019-15232 is a Use-After-Free vulnerability in Live555 Streaming Media before 2019.08.16.

How severe is CVE-2019-15232?

CVE-2019-15232 has a severity rating of 9.8 (Critical).

How can CVE-2019-15232 be exploited?

CVE-2019-15232 can be exploited when the GenericMediaServer::createNewClientSessionWithId function generates the same client session ID in succession.

What is the impact of CVE-2019-15232?

The Use-After-Free vulnerability in Live555 before 2019.08.16 can lead to a security breach where an attacker can execute arbitrary code or cause a denial of service.

How can I fix CVE-2019-15232?