Live555 Streaming Media Heap Overflow Vulnerability in RTSP Server

A heap overflow vulnerability has been identified in Live555 Streaming Media version 2018.09.02. The issue arises in the MatroskaFile::createRTPSinkForTrackNumber() function, where a crafted MKV file can be used to trigger a denial-of-service condition. The vulnerability occurs during the processing of AAC track data, leading to a heap buffer overflow that causes the RTSP server to crash.

Impact

Exploitation of this vulnerability causes the RTSP server to crash while processing the Session Description Protocol (SDP) for a crafted Matroska file, disrupting service and potentially causing a temporary denial of access to the streaming resource.

Reproduction

The vulnerability can be reproduced by uploading a specially crafted Matroska file that exploits the heap overflow during the SDP generation for AAC tracks. This can be done by using the RTSP 'DESCRIBE' command, which triggers the vulnerable code path and causes the server to crash.