CVE-2018-4013
libbasicusageenvironment1: An exploitable code execution vulnerability exists in the HTTP packet-parsing functionality of the LIVE555 RTSP serve...
CVE-2018-4013 is fixed in 5 products on 1 platform, first by libbasicusageenvironment1 2018.02.18-1ubuntu0.1~esm1, released February 27, 2019. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
n/a
Medium
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0967
95th percentile
An exploitable code execution vulnerability exists in the HTTP packet-parsing functionality of the LIVE555 RTSP server library version 0.92. A specially crafted packet can cause a stack-based buffer overflow, resulting in code execution. An attacker can send a packet to trigger this vulnerability.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| libbasicusageenvironment1 · Ubuntu 18.04.6 LTS (bionic) | 2018.02.18-1ubuntu0.1~esm1 | libbasicusageenvironment1 2018.02.18-1ubuntu0.1~esm1 | Feb 27, 2019 |
| libgroupsock8 · Ubuntu 18.04.6 LTS (bionic) | 2018.02.18-1ubuntu0.1~esm1 | libgroupsock8 2018.02.18-1ubuntu0.1~esm1 | Feb 27, 2019 |
| liblivemedia62 · Ubuntu 18.04.6 LTS (bionic) | 2018.02.18-1ubuntu0.1~esm1 | liblivemedia62 2018.02.18-1ubuntu0.1~esm1 | Feb 27, 2019 |
| libusageenvironment3 · Ubuntu 18.04.6 LTS (bionic) | 2018.02.18-1ubuntu0.1~esm1 | libusageenvironment3 2018.02.18-1ubuntu0.1~esm1 | Feb 27, 2019 |
| livemedia-utils · Ubuntu 18.04.6 LTS (bionic) | 2018.02.18-1ubuntu0.1~esm1 | livemedia-utils 2018.02.18-1ubuntu0.1~esm1 | Feb 27, 2019 |