Memory Leak Vulnerability in Live555 0.95: DoS Exploitation via Setup Packet

Memory Leak Vulnerability in Live555 0.95: DoS Exploitation via Setup Packet

CVE-2019-7732 · MEDIUM Severity

AV:N/AC:L/AU:N/C:N/I:N/A:P

In Live555 0.95, a setup packet can cause a memory leak leading to DoS because, when there are multiple instances of a single field (username, realm, nonce, uri, or response), only the last instance can ever be freed.

Learn more about our User Device Pen Test.