CVE-2013-6933

high

Published 2014-01-23 · Modified 2026-04-29

CVSS v3

—

CVSS v2

7.5

VIR risk

7.5

Description

The parseRTSPRequestString function in Live Networks Live555 Streaming Media 2011.08.13 through 2013.11.25, as used in VideoLAN VLC Media Player, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a (1) space or (2) tab character at the beginning of an RTSP message, which triggers an integer underflow, infinite loop, and buffer overflow.

Predictions

Exploit likelihood

20%

Patch ETA

—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

vendor Authored 2026-05-27

Vendor advisory: debian — https://security-tracker.debian.org/tracker/CVE-2013-6933

OS impact

OS	Version	Status	Fixed in
debian	bookworm	fixed	`2:1.1.1+svn37434-1`
debian	bullseye	fixed	`2:1.1.1+svn37434-1`
debian	forky	fixed	`2:1.1.1+svn37434-1`
debian	sid	fixed	`2:1.1.1+svn37434-1`
debian	trixie	fixed	`2:1.1.1+svn37434-1`

Application impact

Vendor	Product	Versions
live555	streaming_media	`2011-08-13`
live555	streaming_media	`2011-08-20`
live555	streaming_media	`2011-08-22`
live555	streaming_media	`2011-09-02`
live555	streaming_media	`2011-09-19`
live555	streaming_media	`2011-10-05`
live555	streaming_media	`2011-10-09`
live555	streaming_media	`2011-10-18`
live555	streaming_media	`2011-10-27`
live555	streaming_media	`2011-11-02`
live555	streaming_media	`2011-11-08`
live555	streaming_media	`2011-11-20`
live555	streaming_media	`2011-11-27`
live555	streaming_media	`2011-11-28`
live555	streaming_media	`2011-11-29`
live555	streaming_media	`2011-12-02`
live555	streaming_media	`2011-12-19`
live555	streaming_media	`2011-12-20`
live555	streaming_media	`2011-12-23`
live555	streaming_media	`2012-01-07`
live555	streaming_media	`2012-01-13`
live555	streaming_media	`2012-01-25`
live555	streaming_media	`2012-01-26`
live555	streaming_media	`2012-02-03`
live555	streaming_media	`2012-02-04`
live555	streaming_media	`2012-02-29`
live555	streaming_media	`2012-03-20`
live555	streaming_media	`2012-03-22`
live555	streaming_media	`2012-04-04`
live555	streaming_media	`2012-04-18`
live555	streaming_media	`2012-04-21`
live555	streaming_media	`2012-04-26`
live555	streaming_media	`2012-04-27`
live555	streaming_media	`2012-05-03`
live555	streaming_media	`2012-05-11`
live555	streaming_media	`2012-05-17`
live555	streaming_media	`2012-06-12`
live555	streaming_media	`2012-06-17`
live555	streaming_media	`2012-06-23`
live555	streaming_media	`2012-06-26`
live555	streaming_media	`2012-07-03`
live555	streaming_media	`2012-07-06`
live555	streaming_media	`2012-07-14`
live555	streaming_media	`2012-07-18`
live555	streaming_media	`2012-07-24`
live555	streaming_media	`2012-07-26`
live555	streaming_media	`2012-08-08`
live555	streaming_media	`2012-08-12`
live555	streaming_media	`2012-08-17`
live555	streaming_media	`2012-08-20`
live555	streaming_media	`2012-08-28`
live555	streaming_media	`2012-08-29`
live555	streaming_media	`2012-08-30`
live555	streaming_media	`2012-08-31`
live555	streaming_media	`2012-09-06`
live555	streaming_media	`2012-09-07`
live555	streaming_media	`2012-09-11`
live555	streaming_media	`2012-09-12`
live555	streaming_media	`2012-09-13`
live555	streaming_media	`2012-09-27`
live555	streaming_media	`2012-10-01`
live555	streaming_media	`2012-10-04`
live555	streaming_media	`2012-10-11`
live555	streaming_media	`2012-10-12`
live555	streaming_media	`2012-10-16`
live555	streaming_media	`2012-10-17`
live555	streaming_media	`2012-10-18`
live555	streaming_media	`2012-10-21`
live555	streaming_media	`2012-10-22`
live555	streaming_media	`2012-10-24`
live555	streaming_media	`2012-11-05`
live555	streaming_media	`2012-11-08`
live555	streaming_media	`2012-11-16`
live555	streaming_media	`2012-11-17`
live555	streaming_media	`2012-11-22`
live555	streaming_media	`2012-11-28`
live555	streaming_media	`2012-11-29`
live555	streaming_media	`2012-11-30`
live555	streaming_media	`2012-12-15`
live555	streaming_media	`2012-12-18`
live555	streaming_media	`2012-12-21`
live555	streaming_media	`2012-12-22`
live555	streaming_media	`2012-12-23`
live555	streaming_media	`2012-12-24`
live555	streaming_media	`2013-01-03`
live555	streaming_media	`2013-01-04`
live555	streaming_media	`2013-01-05`
live555	streaming_media	`2013-01-15`
live555	streaming_media	`2013-01-18`
live555	streaming_media	`2013-01-19`
live555	streaming_media	`2013-01-21`
live555	streaming_media	`2013-01-22`
live555	streaming_media	`2013-01-23`
live555	streaming_media	`2013-01-25`
live555	streaming_media	`2013-02-05`
live555	streaming_media	`2013-02-11`
live555	streaming_media	`2013-02-27`
live555	streaming_media	`2013-03-07`
live555	streaming_media	`2013-03-23`
live555	streaming_media	`2013-03-31`
live555	streaming_media	`2013-04-01`
live555	streaming_media	`2013-04-04`
live555	streaming_media	`2013-04-05`
live555	streaming_media	`2013-04-06`
live555	streaming_media	`2013-04-08`
live555	streaming_media	`2013-04-16`
live555	streaming_media	`2013-04-21`
live555	streaming_media	`2013-04-22`
live555	streaming_media	`2013-04-23`
live555	streaming_media	`2013-04-29`
live555	streaming_media	`2013-04-30`
live555	streaming_media	`2013-05-30`
live555	streaming_media	`2013-06-06`
live555	streaming_media	`2013-06-14`
live555	streaming_media	`2013-06-18`
live555	streaming_media	`2013-06-30`
live555	streaming_media	`2013-07-03`
live555	streaming_media	`2013-07-16`
live555	streaming_media	`2013-07-30`
live555	streaming_media	`2013-07-31`
live555	streaming_media	`2013-08-05`
live555	streaming_media	`2013-08-15`
live555	streaming_media	`2013-08-16`
live555	streaming_media	`2013-08-28`
live555	streaming_media	`2013-08-31`
live555	streaming_media	`2013-09-07`
live555	streaming_media	`2013-09-08`
live555	streaming_media	`2013-09-11`
live555	streaming_media	`2013-09-18`
live555	streaming_media	`2013-09-27`
live555	streaming_media	`2013-09-30`
live555	streaming_media	`2013-10-01`
live555	streaming_media	`2013-10-02`
live555	streaming_media	`2013-10-03`
live555	streaming_media	`2013-10-07`
live555	streaming_media	`2013-10-08`
live555	streaming_media	`2013-10-09`
live555	streaming_media	`2013-10-11`
live555	streaming_media	`2013-10-16`
live555	streaming_media	`2013-10-18`
live555	streaming_media	`2013-10-22`
live555	streaming_media	`2013-10-24`
live555	streaming_media	`2013-10-25`
live555	streaming_media	`2013-11-06`
live555	streaming_media	`2013-11-10`
live555	streaming_media	`2013-11-14`
live555	streaming_media	`2013-11-15`
live555	streaming_media	`2013-11-25`

References

CWEs

CWE-119 CWE-189

Verify integrity in audit chain (admin only). AS-IS.