CVE-2019-9215: Critical severity live555 vulnerability
In Live555 before 2019.02.27, malformed headers lead to invalid memory access in the parseAuthorizationHeader function.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2019-9215?
CVE-2019-9215 is a vulnerability in Live555 before 2019.02.27 that allows malformed headers to lead to invalid memory access in the parseAuthorizationHeader function.
How severe is CVE-2019-9215?
CVE-2019-9215 has a severity rating of 9.8, which is considered critical.
What software is affected by CVE-2019-9215?
The software affected by CVE-2019-9215 includes liblivemedia package in Debian, Live555 Streaming Media, openSUSE Backports SLE, openSUSE Leap, and Debian Linux.
How can I fix CVE-2019-9215?
To fix CVE-2019-9215, update to version 2018.11.26-1.1 for the liblivemedia package in Debian, or update to a version beyond 2019.02.27 for Live555 Streaming Media.
Where can I find more information about CVE-2019-9215?
You can find more information about CVE-2019-9215 in the following references: [Reference 1](http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00044.html), [Reference 2](http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00024.html), [Reference 3](http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00009.html).