CVE-2019-15784

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Secure Reliable Transport (SRT) through 1.3.4 has a CSndUList array overflow if there are many SRT connections.

Metrics

CVSS 3.0 9.8/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-129

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00020.html
http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00036.html
https://github.com/Haivision/srt/pull/811Issue Tracking, Patch, Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00020.html
http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00036.html
https://github.com/Haivision/srt/pull/811Issue Tracking, Patch, Third Party Advisory

Timeline

Published: Aug 29, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2019

CVE-2019-157859.8FontForge 20190813 through 20190820 has a buffer overflow in PrefsUI_LoadPrefs in prefs.c.CVE-2019-157869.8ROBOTIS Dynamixel SDK through 3.7.11 has a buffer overflow via a large rxpacket.CVE-2019-157877.5libZetta.rs through 0.1.2 has an integer overflow in the zpool parser (for error stats) that leads to a panic.CVE-2019-157889.8Clara Genomics Analysis before 0.2.0 has an integer overflow for cudapoa memory management in allocate_block.cpp.CVE-2019-157897.8Privilege escalation vulnerability in MicroK8s allows a low privilege user with local access to obtain root access to the host by provisioni CVE-2019-15798.1Remote Code Execution in PAN-OS 7.1.18 and earlier, PAN-OS 8.0.11-h1 and earlier, and PAN-OS 8.1.2 and earlier with GlobalProtect Portal or CVE-2019-157903.3Apport reads and writes information on a crashed process to /proc/pid with elevated privileges. Apport then determines which user the crashe CVE-2019-157917.8In shiftfs, a non-upstream patch to the Linux kernel included in the Ubuntu 5.0 and 5.3 kernel series, shiftfs_btrfs_ioctl_fd_replace() inst CVE-2019-157927.8In shiftfs, a non-upstream patch to the Linux kernel included in the Ubuntu 5.0 and 5.3 kernel series, shiftfs_btrfs_ioctl_fd_replace() call CVE-2019-157938.8In shiftfs, a non-upstream patch to the Linux kernel included in the Ubuntu 5.0 and 5.3 kernel series, several locations which shift ids tra CVE-2019-157946.7Overlayfs in the Linux kernel and shiftfs, a non-upstream patch to the Linux kernel included in the Ubuntu 5.0 and 5.3 kernel series, both r CVE-2019-157954.7python-apt only checks the MD5 sums of downloaded files in `Version.fetch_binary()` and `Version.fetch_source()` of apt/package.py in versio