CVE-2021-38380: High severity Live555 live555 vulnerability
Live555 through 1.08 mishandles huge requests for the same MP3 stream, leading to recursion and s stack-based buffer over-read. An attacker can leverage this to launch a DoS attack.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2021-38380?
CVE-2021-38380 is a vulnerability in Live555 through version 1.08 that mishandles huge requests for the same MP3 stream, leading to recursion and a stack-based buffer over-read.
What is the severity of CVE-2021-38380?
The severity of CVE-2021-38380 is high, with a CVSS score of 7.5.
How does CVE-2021-38380 affect Live555?
CVE-2021-38380 affects Live555 through version 1.08 by allowing an attacker to launch a DoS attack through the mishandling of huge requests for the same MP3 stream.
How can an attacker leverage CVE-2021-38380?
An attacker can leverage CVE-2021-38380 to launch a DoS attack by exploiting the recursion and stack-based buffer over-read caused by mishandling huge requests for the same MP3 stream.
Is there a fix for CVE-2021-38380?
Yes, a fix for CVE-2021-38380 is available in version 2021.08.04 of Live555.