Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The parseRTSPRequestString function in LIVE555 Media Server 2007.11.01 and earlier allows remote attackers to cause a denial of service (daemon crash) via a short RTSP query, which causes a negative number to be used during memory allocation.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
LIVE555媒体服务器ParseRTSPRequestString远程拒绝服务漏洞
Vulnerability Description
LIVE555 Media Server是一款RTSP服务器程序，可提供各种媒体文件流服务。 LIVE555媒体服务器在处理畸形的请求数据时存在漏洞，远程攻击者可能利用此漏洞导致服务器不可用。 LIVE555媒体服务器的parseRTSPRequestString()函数没有检查客户端数据的数量(reqStrSize)是否大于或等于8字节。因为该函数使用了无符数字，因此7 - 8不是-1而是4294967295，这就导致到达了分配内存的末尾而出现崩溃。以下是liveMedia/RTSPCommon文件中有
CVSS Information
N/A
Vulnerability Type
N/A