{"id":"CVE-2018-4013","aliases":["DEBIAN-CVE-2018-4013","DLA-1582-1","DSA-4343-1","EUVD-2018-15799","GHSA-3rmx-2chr-mp38","MGASA-2019-0029","UBUNTU-CVE-2018-4013","USN-4853-1","openSUSE-SU-2019:0058-1","openSUSE-SU-2024:11023-1"],"status":"published","title":"An exploitable code execution vulnerability exists in the HTTP packet-parsing functionality of...","description":"An exploitable code execution vulnerability exists in the HTTP packet-parsing functionality of the LIVE555 RTSP server library version 0.92. A specially crafted packet can cause a stack-based buffer overflow, resulting in code execution. An attacker can send a packet to trigger this vulnerability.","severity":{"version":"3.0","score":10,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-08","score":0.09667,"percentile":0.9553,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-787"],"published":"2018-10-19T13:00:00Z","modified":"2026-10-23T18:03:57Z","exploits":[{"source":"pocgithub","id":"DoubleMice/cve-2018-4013","title":"DoubleMice/cve-2018-4013","date":"2018-10-24","url":"https://github.com/DoubleMice/cve-2018-4013"},{"source":"pocgithub","id":"r3dxpl0it/RTSPServer-Code-Execution-Vulnerability","title":"r3dxpl0it/RTSPServer-Code-Execution-Vulnerability","date":"2018-11-24","url":"https://github.com/r3dxpl0it/RTSPServer-Code-Execution-Vulnerability"}],"fixes":[{"ecosystem":"Debian:14","package":"liblivemedia","fixed_in":["2018.10.17-1"],"sources":["osv"]},{"ecosystem":"Debian:8","package":"liblivemedia","fixed_in":["2014.01.13-1+deb8u1"],"sources":["osv"]},{"ecosystem":"Debian:9","package":"liblivemedia","fixed_in":["2016.11.28-1+deb9u1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"liblivemedia","fixed_in":["2014.01.13-1+deb8u1build0.14.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"liblivemedia","fixed_in":["2016.02.09-1ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"liblivemedia","fixed_in":["2018.02.18-1ubuntu0.1~esm1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:14","package":"liblivemedia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2018.10.17-1"}]}],"versions":["2004.11.11a-1","2005.04.01-1","2005.06.16-1","2005.07.21-1","2005.10.05-1","2006.03.17-1","2006.03.17-2","2007.02.20-1","2007.02.20-2","2008.07.25-1","2008.07.25-2","2009.11.27-1","2010.02.10-1","2010.04.09-1","2010.11.17-1","2011.03.14-1","2011.05.25-1","2011.06.16-1","2011.07.08-1","2011.07.21-1","2011.08.22-1","2011.09.02-1","2011.12.23-1","2012.02.04-1","2012.02.29-1","2012.02.29-2","2012.04.04-1","2012.04.21-1","2012.05.03-1","2012.05.03-1~bpo60+1","2012.05.17-1","2012.05.17-1+wheezy1","2012.05.17-1~bpo60+1","2012.08.31-1","2012.10.24-1","2012.11.16-1","2012.11.30-1","2013.01.05-1","2013.01.05-2","2013.01.05-3","2013.01.15-1","2013.04.30-1","2013.10.25-1","2014.01.13-1","2015.12.22-1","2016.01.12-1","2016.01.16-1","2016.01.20-1","2016.01.29-1","2016.01.29-2","2016.02.09-1","2016.03.16-1","2016.04.01-1","2016.04.21-1","2016.06.26-1","2016.07.19-1","2016.08.07-1","2016.08.27-1","2016.09.22-1","2016.11.06-1","2016.11.17-1","2016.11.28-1","2017.01.26-1","2017.04.10-1","2017.04.26-1","2017.06.04-1","2017.06.04-2","2017.07.18-1","2017.09.12-1","2017.10.28-1","2017.10.28-2","2018.01.24-1","2018.01.29-1","2018.02.18-1","2018.02.28-1","2018.04.25-1","2018.04.25-2","2018.07.07-1","2018.08.05-1","2018.08.27-1","2018.08.27-2","2018.08.28a-1","2018.09.06-1","2018.09.10-1","2018.09.18-1"]},{"source":"osv","ecosystem":"Debian:8","package":"liblivemedia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2014.01.13-1+deb8u1"}]}],"versions":["2014.01.13-1"]},{"source":"osv","ecosystem":"Debian:9","package":"liblivemedia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2016.11.28-1+deb9u1"}]}],"versions":["2016.11.28-1"]},{"source":"osv","ecosystem":"Mageia:6","package":"live","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2018.11.26-1.mga6"}]}],"bundled":2},{"source":"osv","ecosystem":"Mageia:6","package":"ffmpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.9-1.mga6"}]}],"bundled":2},{"source":"osv","ecosystem":"Mageia:6","package":"mplayer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-13.mga6"}]}],"bundled":2},{"source":"osv","ecosystem":"Mageia:6","package":"vlc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.5-2.mga6"}]}],"bundled":2},{"source":"osv","ecosystem":"Mageia:6","package":"ffmpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.9-1.mga6.tainted"}]}],"bundled":2},{"source":"osv","ecosystem":"Mageia:6","package":"mplayer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-13.mga6.tainted"}]}],"bundled":2},{"source":"osv","ecosystem":"Mageia:6","package":"vlc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.5-2.mga6.tainted"}]}],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"liblivemedia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2014.01.13-1+deb8u1build0.14.04.1"}]}],"versions":["2013.04.30-1","2013.04.30-1ubuntu1","2013.10.25-1","2014.01.13-1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"liblivemedia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2016.02.09-1ubuntu0.1~esm1"}]}],"versions":["2014.01.13-1","2016.01.29-2","2016.02.09-1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"liblivemedia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2018.02.18-1ubuntu0.1~esm1"}]}],"versions":["2017.07.18-1","2017.09.12-1ubuntu1","2017.10.28-2","2018.01.29-1","2018.02.18-1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"liblivemedia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2016.02.09-1ubuntu0.1~esm1"}]}],"versions":["2014.01.13-1","2016.01.29-2","2016.02.09-1"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"liblivemedia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2018.02.18-1ubuntu0.1~esm1"}]}],"versions":["2017.07.18-1","2017.09.12-1ubuntu1","2017.10.28-2","2018.01.29-1","2018.02.18-1"],"bundled":4},{"source":"osv","ecosystem":"SUSE:Package Hub 15","package":"live555","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2018.12.14-bp150.3.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.0","package":"live555","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2018.12.14-bp150.3.3.1"}]}],"bundled":2}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"live networks","product":"live555 media server"},{"vendor":"live555","product":"live555_media_server"}],"references":[{"url":"https://www.debian.org/security/2018/dsa-4343","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory","web"]},{"url":"http://lists.live555.com/pipermail/live-devel/2018-October/021071.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","report"]},{"url":"https://lists.debian.org/debian-lts-announce/2018/11/msg00020.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/202005-06","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","Third Party Advisory"]},{"url":"https://talosintelligence.com/vulnerability_reports/TALOS-2018-0684","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-4013"},{"url":"https://github.com/advisories/GHSA-3rmx-2chr-mp38"},{"url":"https://security-tracker.debian.org/tracker/CVE-2018-4013","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2019-0029.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=24071","tags":["report"]},{"url":"http://live555.com/liveMedia/public/changelog.txt","tags":["web"]},{"url":"https://www.videolan.org/developers/vlc-branch/NEWS","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2018-4013","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-4853-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-4013","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-6256","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-7314","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-9215","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/4NOTQMR6AICFVIHO7JSMILX3ERHDS52U/#4NOTQMR6AICFVIHO7JSMILX3ERHDS52U","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1114779","tags":["report"]},{"url":"https://bugzilla.suse.com/1121892","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2018-4013","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-6256","tags":["web"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2019-15232","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-7314","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9215","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-28899","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-38380","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-38381","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-38382","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-39282","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-39283","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2018-4013","description":"An exploitable code execution vulnerability exists in the HTTP packet-parsing functionality of the LIVE555 RTSP server library version 0.92. A specially crafted packet can cause a stack-based buffer overflow, resulting in code execution. An attacker can send a packet to trigger this vulnerability.","status":"published","published":"2018-10-19T13:00:00Z","modified":"2024-09-16T22:24:54.989Z","cvss":[{"version":"3.0","score":10,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical","assessor":"cna"}],"updated_at":"2026-11-02T14:35:08.341767Z"}],"euvd":[{"id":"EUVD-2018-15799","description":"An exploitable code execution vulnerability exists in the HTTP packet-parsing functionality of the LIVE555 RTSP server library version 0.92. A specially crafted packet can cause a stack-based buffer overflow, resulting in code execution. An attacker can send a packet to trigger this vulnerability.","status":"published","published":"2018-10-19T13:00:00Z","modified":"2024-09-16T22:24:54Z","cvss":[{"version":"3.0","score":10,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-03T00:55:03.452021Z"}],"ghsa":[{"id":"GHSA-3rmx-2chr-mp38","title":"An exploitable code execution vulnerability exists in the HTTP packet-parsing functionality of...","description":"An exploitable code execution vulnerability exists in the HTTP packet-parsing functionality of the LIVE555 RTSP server library version 0.92. A specially crafted packet can cause a stack-based buffer overflow, resulting in code execution. An attacker can send a packet to trigger this vulnerability.","status":"published","published":"2022-05-13T01:01:45Z","modified":"2023-01-27T05:02:11Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:42:02.011098Z"}],"nvd":[{"id":"CVE-2018-4013","description":"An exploitable code execution vulnerability exists in the HTTP packet-parsing functionality of the LIVE555 RTSP server library version 0.92. A specially crafted packet can cause a stack-based buffer overflow, resulting in code execution. An attacker can send a packet to trigger this vulnerability.","status":"published","published":"2018-10-19T13:29:00.68Z","modified":"2026-06-17T01:58:13.077Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"3.0","score":10,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical","assessor":"secondary"},{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:04:46.409324Z"}],"osv":[{"id":"DEBIAN-CVE-2018-4013","description":"An exploitable code execution vulnerability exists in the HTTP packet-parsing functionality of the LIVE555 RTSP server library version 0.92. A specially crafted packet can cause a stack-based buffer overflow, resulting in code execution. An attacker can send a packet to trigger this vulnerability.","status":"published","published":"2018-10-19T13:29:00.68Z","modified":"2026-10-23T18:03:57.814591586Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:45:30.867575Z"},{"id":"UBUNTU-CVE-2018-4013","description":"An exploitable code execution vulnerability exists in the HTTP packet-parsing functionality of the LIVE555 RTSP server library version 0.92. A specially crafted packet can cause a stack-based buffer overflow, resulting in code execution. An attacker can send a packet to trigger this vulnerability.","status":"published","published":"2018-10-19T13:29:00Z","modified":"2026-04-22T11:54:40.463265Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"},{"version":"3.0","score":10,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical"},{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:54:18.33562Z"},{"id":"DLA-1582-1","title":"liblivemedia - security update","status":"published","published":"2018-11-20T00:00:00Z","modified":"2026-03-09T01:20:38.554761Z","updated_at":"2026-11-02T15:46:09.777694Z"},{"id":"DSA-4343-1","title":"liblivemedia - security update","status":"published","published":"2018-11-23T00:00:00Z","modified":"2026-03-09T02:10:43.320092Z","updated_at":"2026-11-02T15:46:16.862196Z"},{"id":"MGASA-2019-0029","title":"Updated live, ffmpeg, mplayer, and vlc packages fix security vulnerabilities","description":"A bug in the server implementation of RTSP-over-HTTP in live could allow\na denial-of-service attack.\n\nA bug in the server implementation of RTSP-over-HTTP could allow a\nbuffer overflow, which could result in the execution of arbitrary code\nwhen parsing a malformed RTSP stream (CVE-2018-4013).\n\nThe flv_write_packet function in libavformat/flvenc.c in FFmpeg through\n3.3.8 does not check for an empty audio packet, leading to an assertion\nfailure (CVE-2018-15822).\n\nThe live package has been updated to version 2018.11.26, the ffmpeg\npackage has been updated to version 3.3.9, and the vlc package has been\nupdated to version 3.0.5, fixing these issues and other bugs.\n\nThe mplayer package has been rebuilt against the update live package to\nfix the RTSP-over-HTTP issues in mplayer.\n","status":"published","published":"2019-01-10T10:53:49Z","modified":"2026-04-16T06:23:17.341679028Z","updated_at":"2026-11-02T15:49:40.793816Z"},{"id":"openSUSE-SU-2019:0058-1","title":"Security update for live555","description":"This update fixes two security issues in live555:\n\n- CVE-2018-4013: Remote code execution vulnerability (bsc#1114779)\n- CVE-2019-6256: Denial of Service issue with RTSP-over-HTTP tunneling via x-sessioncookie HTTP headers (boo#1121892)\n\nThis library is statically linked into VLC. However VLC is not affected because it only uses the live555 library to implement the RTSP client.","status":"published","published":"2019-03-23T10:48:15Z","modified":"2026-02-04T03:02:14.756726Z","updated_at":"2026-11-02T16:58:30.39372Z"},{"id":"openSUSE-SU-2024:11023-1","title":"libBasicUsageEnvironment1-2021.08.23-1.2 on GA media","description":"These are all security issues fixed in the libBasicUsageEnvironment1-2021.08.23-1.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:35:01.824047Z","updated_at":"2026-11-02T16:58:34.894275Z"},{"id":"USN-4853-1","title":"liblivemedia vulnerabilities","description":"It was discovered that liveMedia incorrectly handled certain network\npackets. An attacker could possibly use this issue to execute arbitrary\ncode. (CVE-2018-4013)\n\nIt was discovered that liveMedia incorrectly handled certain network\nsessions. An attacker could possibly use this issue to cause a denial of\nservice. (CVE-2019-6256)\n\nIt was discovered that liveMedia incorrectly handled certain RTSP\nstreamings. An attacker could possiby use this issue to cause a denial of\nservice or other unspecified impact. (CVE-2019-7314)\n\nIt was discovered that liveMedia incorrectly handled certain requests. An\nattacker could possibly use this issue to obtain sensitive information.\n(CVE-2019-9215)","status":"published","published":"2021-03-15T22:39:54Z","modified":"2026-06-25T13:30:31.839908861Z","updated_at":"2026-11-02T16:58:15.159055Z"}]}}