[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f4hHHt33tj8CxQhmAXcOitjSWwcL2D31xPQGTjkA2dLs":3},{"success":4,"data":5},true,{"vendor":6,"topVulnerabilitiesByEpss":41,"kevVulnerabilities":97,"topProductsByCves":98,"seoMetadata":104,"meta":113},{"vendorId":7,"vendorName":8,"productCount":9,"cveCount":10,"kevCount":11,"versionCount":12,"lastCveUpdate":13,"firstLetter":14,"products":15,"description":40},18062,"live555",5,19,0,637,"2024-01-12","l",[16,22,26,31,36],{"id":17,"product_name":18,"version_count":19,"cve_count":20,"kev_count":11,"last_cve_update":21},104384,"streaming_media",559,8,"2021-04-29",{"id":23,"product_name":8,"version_count":24,"cve_count":25,"kev_count":11,"last_cve_update":13},104381,75,7,{"id":27,"product_name":28,"version_count":29,"cve_count":29,"kev_count":11,"last_cve_update":30},104382,"live555_media_server",2,"2019-01-14",{"id":32,"product_name":33,"version_count":34,"cve_count":34,"kev_count":11,"last_cve_update":35},104380,"liblivemedia",1,"2021-01-11",{"id":37,"product_name":38,"version_count":11,"cve_count":34,"kev_count":11,"last_cve_update":39},104383,"media_server","2007-11-20","Live555 is a technology vendor with 5 tracked products and 19 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this vendor.",[42,51,55,63,68,74,78,83,88,92],{"cveId":43,"description":44,"publishedDate":45,"cvssScore":46,"cvssVersion":47,"severity":48,"isKev":49,"epssScore":50},"CVE-2013-6934","The parseRTSPRequestString function in Live Networks Live555 Streaming Media 2013.11.26, as used in VideoLAN VLC Media Player, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a space character at the beginning of an RTSP message, which triggers an integer underflow, infinite loop, and buffer overflow.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-6933.","2014-01-23",7.5,"v2","High",false,0.28174,{"cveId":52,"description":53,"publishedDate":45,"cvssScore":46,"cvssVersion":47,"severity":48,"isKev":49,"epssScore":54},"CVE-2013-6933","The parseRTSPRequestString function in Live Networks Live555 Streaming Media 2011.08.13 through 2013.11.25, as used in VideoLAN VLC Media Player, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a (1) space or (2) tab character at the beginning of an RTSP message, which triggers an integer underflow, infinite loop, and buffer overflow.",0.17415,{"cveId":56,"description":57,"publishedDate":58,"cvssScore":59,"cvssVersion":60,"severity":61,"isKev":49,"epssScore":62},"CVE-2018-4013","An exploitable code execution vulnerability exists in the HTTP packet-parsing functionality of the LIVE555 RTSP server library version 0.92. A specially crafted packet can cause a stack-based buffer overflow, resulting in code execution. An attacker can send a packet to trigger this vulnerability.","2018-10-19",9.8,"v3.1","Critical",0.09667,{"cveId":64,"description":65,"publishedDate":39,"cvssScore":66,"cvssVersion":47,"severity":48,"isKev":49,"epssScore":67},"CVE-2007-6036","The parseRTSPRequestString function in LIVE555 Media Server 2007.11.01 and earlier allows remote attackers to cause a denial of service (daemon crash) via a short RTSP query, which causes a negative number to be used during memory allocation.",7.1,0.04412,{"cveId":69,"description":70,"publishedDate":71,"cvssScore":59,"cvssVersion":72,"severity":61,"isKev":49,"epssScore":73},"CVE-2019-7314","liblivemedia in Live555 before 2019.02.03 mishandles the termination of an RTSP stream after RTP\u002FRTCP-over-RTSP has been set up, which could lead to a Use-After-Free error that causes the RTSP server to crash (Segmentation fault) or possibly have unspecified other impact.","2019-02-04","v3.0",0.03192,{"cveId":75,"description":76,"publishedDate":30,"cvssScore":59,"cvssVersion":72,"severity":61,"isKev":49,"epssScore":77},"CVE-2019-6256","A Denial of Service issue was discovered in the LIVE555 Streaming Media libraries as used in Live555 Media Server 0.93. It can cause an RTSPServer crash in handleHTTPCmd_TunnelingPOST, when RTSP-over-HTTP tunneling is supported, via x-sessioncookie HTTP headers in a GET request and a POST request within the same TCP session. This occurs because of a call to an incorrect virtual function pointer in the readSocket function in GroupsockHelper.cpp.",0.02414,{"cveId":79,"description":80,"publishedDate":81,"cvssScore":59,"cvssVersion":60,"severity":61,"isKev":49,"epssScore":82},"CVE-2019-9215","In Live555 before 2019.02.27, malformed headers lead to invalid memory access in the parseAuthorizationHeader function.","2019-02-28",0.02173,{"cveId":84,"description":85,"publishedDate":86,"cvssScore":59,"cvssVersion":60,"severity":61,"isKev":49,"epssScore":87},"CVE-2019-15232","Live555 before 2019.08.16 has a Use-After-Free because GenericMediaServer::createNewClientSessionWithId can generate the same client session ID in succession, which is mishandled by the MPEG1or2 and Matroska file demultiplexors.","2019-08-20",0.0173,{"cveId":89,"description":90,"publishedDate":35,"cvssScore":59,"cvssVersion":60,"severity":61,"isKev":49,"epssScore":91},"CVE-2020-24027","In Live Networks, Inc., liblivemedia version 20200625, there is a potential buffer overflow bug in the server handling of a RTSP \"PLAY\" command, when the command specifies seeking by absolute time.",0.01632,{"cveId":93,"description":94,"publishedDate":95,"cvssScore":46,"cvssVersion":72,"severity":48,"isKev":49,"epssScore":96},"CVE-2019-7733","In Live555 0.95, there is a buffer overflow via a large integer in a Content-Length HTTP header because handleRequestBytes has an unrestricted memmove.","2019-02-11",0.0158,[],[99,100,101,102,103],{"id":17,"product_name":18,"version_count":19,"cve_count":20,"kev_count":11,"last_cve_update":21},{"id":23,"product_name":8,"version_count":24,"cve_count":25,"kev_count":11,"last_cve_update":13},{"id":27,"product_name":28,"version_count":29,"cve_count":29,"kev_count":11,"last_cve_update":30},{"id":32,"product_name":33,"version_count":34,"cve_count":34,"kev_count":11,"last_cve_update":35},{"id":37,"product_name":38,"version_count":11,"cve_count":34,"kev_count":11,"last_cve_update":39},{"title":105,"metaDescription":106,"keywords":107,"structuredData":108},"Live555 - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Live555 covering 5 products with 19 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Live555 vulnerabilities, Live555 security, Live555 CVE, Live555 threat intelligence, vendor security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":109,"@type":110,"name":111,"description":106,"url":112},"https:\u002F\u002Fschema.org","Organization","Live555","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Flive555",{"totalProducts":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":13,"generatedAt":114,"apiVersion":115},"2026-10-17T17:46:47.300Z","3.0"]