GCVE - cpe:2.3:a:live555:streaming_media:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:live555:streaming_media:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Live555 (`0ca053ca-7078-53ad-984c-3102ed26e64e`)
Product	Streaming Media (`431dd272-9e51-5762-8100-5c969a2671e5`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:github/rgaufman/live555`	purl2cpe	2026-06-01 10:12:34.440669

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2021-28899`	vulnerable	2026-06-08 05:31:25.125437	Details available Vulnerability in the AC3AudioFileServerMediaSubsession, ADTSAudioFileServerMediaSubsession, and AMRAudioFileServerMediaSubsessionLive OnDemandServerMediaSubsession subclasses in Networks LIVE555 Streaming Media before 2021.3.16. Published: 2021-04-29T14:08:31.000Z Updated: 2024-08-03T21:55:11.671Z Open on db.gcve.eu Reference links http://lists.live555.com/pipermail/live-devel/2021-March/021891.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-9215`	vulnerable	2026-06-08 05:14:25.145537	Details available In Live555 before 2019.02.27, malformed headers lead to invalid memory access in the parseAuthorizationHeader function. Published: 2019-02-28T04:00:00.000Z Updated: 2024-08-04T21:38:46.622Z Open on db.gcve.eu Reference links http://www.live555.com/liveMedia/public/changelog.txt https://seclists.org/bugtraq/2019/Mar/22 https://www.debian.org/security/2019/dsa-4408 https://lists.debian.org/debian-lts-announce/2019/03/msg00022.html http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00044.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-7314`	vulnerable	2026-06-08 05:14:14.250868	Details available liblivemedia in Live555 before 2019.02.03 mishandles the termination of an RTSP stream after RTP/RTCP-over-RTSP has been set up, which could lead to a Use-After-Free error that causes the RTSP server to crash (Segmentation fault) or possibly have unspecified other impact. Published: 2019-02-04T02:00:00.000Z Updated: 2024-08-04T20:46:46.132Z Open on db.gcve.eu Reference links https://lists.debian.org/debian-lts-announce/2019/02/msg00037.html http://www.live555.com/liveMedia/public/changelog.txt http://lists.live555.com/pipermail/live-devel/2019-February/021143.html https://seclists.org/bugtraq/2019/Mar/22 https://www.debian.org/security/2019/dsa-4408	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-15232`	vulnerable	2026-06-08 05:12:56.827278	Details available Live555 before 2019.08.16 has a Use-After-Free because GenericMediaServer::createNewClientSessionWithId can generate the same client session ID in succession, which is mishandled by the MPEG1or2 and Matroska file demultiplexors. Published: 2019-08-19T23:57:37.000Z Updated: 2024-08-05T00:42:04.063Z Open on db.gcve.eu Reference links http://www.live555.com/liveMedia/public/changelog.txt https://security.gentoo.org/glsa/202005-06	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.