libbasicusageenvironment1: A Denial of Service issue was discovered in the LIVE555 Streaming Media libraries as used in Live555 Media Server 0.93
CVE-2019-6256 is fixed in 5 products on 1 platform, first by libbasicusageenvironment1 2018.02.18-1ubuntu0.1~esm1, released February 27, 2019. It is not reported as exploited. Patch Radar priority: Routine.
A Denial of Service issue was discovered in the LIVE555 Streaming Media libraries as used in Live555 Media Server 0.93. It can cause an RTSPServer crash in handleHTTPCmd_TunnelingPOST, when RTSP-over-HTTP tunneling is supported, via x-sessioncookie HTTP headers in a GET request and a POST request within the same TCP session. This occurs because of a call to an incorrect virtual function pointer in the readSocket function in GroupsockHelper.cpp.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| libbasicusageenvironment1 · Ubuntu 18.04.6 LTS (bionic) | 2018.02.18-1ubuntu0.1~esm1 | libbasicusageenvironment1 2018.02.18-1ubuntu0.1~esm1 | Feb 27, 2019 |
| libgroupsock8 · Ubuntu 18.04.6 LTS (bionic) | 2018.02.18-1ubuntu0.1~esm1 | libgroupsock8 2018.02.18-1ubuntu0.1~esm1 | Feb 27, 2019 |
| liblivemedia62 · Ubuntu 18.04.6 LTS (bionic) | 2018.02.18-1ubuntu0.1~esm1 | liblivemedia62 2018.02.18-1ubuntu0.1~esm1 | Feb 27, 2019 |
| libusageenvironment3 · Ubuntu 18.04.6 LTS (bionic) | 2018.02.18-1ubuntu0.1~esm1 | libusageenvironment3 2018.02.18-1ubuntu0.1~esm1 | Feb 27, 2019 |
| livemedia-utils · Ubuntu 18.04.6 LTS (bionic) | 2018.02.18-1ubuntu0.1~esm1 | livemedia-utils 2018.02.18-1ubuntu0.1~esm1 | Feb 27, 2019 |
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.