CVE-2019-15784
Secure Reliable Transport (SRT) through 1.3.4 has a CSndUList array overflow if there are many...
Secure Reliable Transport (SRT) through 1.3.4 has a CSndUList array overflow if there are many SRT connections.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
Secure Reliable Transport (SRT) through 1.3.4 has a CSndUList array overflow if there are many SRT connections.
- Record
CVE-2019-15784- CVSS 3.0
- 9.8 Critical
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-129
- Updated
- 2026-11-02
CVE List No score
Secure Reliable Transport (SRT) through 1.3.4 has a CSndUList array overflow if there are many SRT connections.
- Record
CVE-2019-15784- Updated
- 2026-11-02
EUVDEUVD-2019-6707 No score
Secure Reliable Transport (SRT) through 1.3.4 has a CSndUList array overflow if there are many SRT connections.
- Record
EUVD-2019-6707- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-f9v4-7rfw-58p4
Secure Reliable Transport (SRT) through 1.3.4 has a CSndUList array overflow if there are many...
Secure Reliable Transport (SRT) through 1.3.4 has a CSndUList array overflow if there are many SRT connections.
- Record
GHSA-f9v4-7rfw-58p4- CVSS 3.0
- 9.8 Critical
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-129
- Updated
- 2026-11-02
OSV
Secure Reliable Transport (SRT) through 1.3.4 has a CSndUList array overflow if there are many SRT connections.
- Record
CVE-2019-15784- CVSS 3.0
- 9.8 Critical
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2019-15784
Secure Reliable Transport (SRT) through 1.3.4 has a CSndUList array overflow if there are many SRT connections.
- Record
DEBIAN-CVE-2019-15784- CVSS 3.0
- 9.8 Critical
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
Show 4 moreShow less
OSVUBUNTU-CVE-2019-15784
Secure Reliable Transport (SRT) through 1.3.4 has a CSndUList array overflow if there are many SRT connections.
- Record
UBUNTU-CVE-2019-15784- CVSS 3.0
- 9.8 Critical
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVopenSUSE-SU-2019:2083-1 No score
Security update for srt
srt was updated to version 1.3.4.
Security issues fixed:
-
CVE-2019-15784: avoid a potential array overflow. (boo#1148844)
-
New binary: srt-tunnel
-
srt-multiplexer binary is now a testing application and thus is dropped from our package.
- Record
openSUSE-SU-2019:2083-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2019:2128-1 No score
Security update for srt
srt was updated to version 1.3.4.
Security issues fixed:
-
CVE-2019-15784: avoid a potential array overflow. (boo#1148844)
-
New binary: srt-tunnel
-
srt-multiplexer binary is now a testing application and thus is dropped from our package.
This update was imported from the openSUSE:Leap:15.1:Update update project.
- Record
openSUSE-SU-2019:2128-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:11405-1 No score
libsrt1_4-1.4.3-1.3 on GA media
These are all security issues fixed in the libsrt1_4-1.4.3-1.3 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:11405-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
srtDebian:12 |
before 1.4.0-1 | 1.4.0-1 |
srtDebian:13 |
before 1.4.0-1 | 1.4.0-1 |
srtDebian:14 |
before 1.4.0-1 | 1.4.0-1 |
srtopenSUSE:Leap 15.1 |
before 1.3.4-lp151.2.3.1 | 1.3.4-lp151.2.3.1 |
srtSUSE:Package Hub 15 SP1 |
before 1.3.4-bp151.3.3.1 | 1.3.4-bp151.3.3.1 |
srtopenSUSE:Tumbleweed |
before 1.4.3-1.3 | 1.4.3-1.3 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2019-15784 is a critical vulnerability (CVSS 9.8) in Srtalliance Secure Reliable Transport, published August 29, 2019. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.97%, the 80th percentile. Fixed in srt 1.4.0-1.
References
github.com/Haivision/srt/pull/811
lists.opensuse.org/opensuse-security-announce/2019-09/msg00020.html
nvd.nist.gov/vuln/detail/CVE-2019-15784
security-tracker.debian.org/tracker/CVE-2019-15784
Show 6 moreShow less
ubuntu.com/security/CVE-2019-15784
cve.org/CVERecord?id=CVE-2019-15784
bugzilla.suse.com/1148844
suse.com/security/cve/CVE-2019-15784