CVE-2018-4013

CRITICAL

live555_media_server 0.92 - Remote Code Execution via HTTP Packet Parsing

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 2 public exploits for CVE-2018-4013. PoCs published by r3dxpl0it, DoubleMice.

AI-analyzed exploit summary This PoC exploits a stack-based buffer overflow in LIVE555 RTSP server's HTTP packet-parsing functionality (CVE-2018-4013). It crafts a malicious HTTP request with an oversized 'Accept' header to trigger code execution via a buffer overflow in the 'lookForHeader' function.

Description

An exploitable code execution vulnerability exists in the HTTP packet-parsing functionality of the LIVE555 RTSP server library version 0.92. A specially crafted packet can cause a stack-based buffer overflow, resulting in code execution. An attacker can send a packet to trigger this vulnerability.

Exploits (2)

nomisec WORKING POC 15 stars
by r3dxpl0it · poc
https://github.com/r3dxpl0it/RTSPServer-Code-Execution-Vulnerability

This PoC exploits a stack-based buffer overflow in LIVE555 RTSP server's HTTP packet-parsing functionality (CVE-2018-4013). It crafts a malicious HTTP request with an oversized 'Accept' header to trigger code execution via a buffer overflow in the 'lookForHeader' function.

Classification
Working Poc 90%
Attack Type
Rce
Complexity
Moderate
Reliability
Reliable
Target: LIVE555 RTSP Server (versions prior to fix for CVE-2018-4013)
No auth needed
Prerequisites: Network access to the target RTSP server's HTTP tunneling port (typically 80, 8000, or 8080)
devstral-2 · analyzed Feb 16, 2026 Full analysis →
nomisec WORKING POC 7 stars
by DoubleMice · poc
https://github.com/DoubleMice/cve-2018-4013

This PoC exploits CVE-2018-4013, a buffer overflow vulnerability in the HTTP header parsing of certain software. It sends a maliciously crafted HTTP request with an oversized 'Accept' header to trigger a denial-of-service (DoS) condition.

Classification
Working Poc 80%
Attack Type
Dos
Complexity
Trivial
Reliability
Reliable
Target: Unknown (likely a specific HTTP server or service vulnerable to header parsing overflows)
No auth needed
Prerequisites: Network access to the target service · Target service must be vulnerable to CVE-2018-4013
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (5)

Core 5
Core References
Third Party Advisory vendor-advisory x_refsource_debian
https://www.debian.org/security/2018/dsa-4343
Mailing List, Third Party Advisory mailing-list x_refsource_mlist
http://lists.live555.com/pipermail/live-devel/2018-October/021071.html
Mailing List, Third Party Advisory mailing-list x_refsource_mlist
https://lists.debian.org/debian-lts-announce/2018/11/msg00020.html
Third Party Advisory vendor-advisory x_refsource_gentoo
https://security.gentoo.org/glsa/202005-06
Exploit, Third Party Advisory x_refsource_misc
https://talosintelligence.com/vulnerability_reports/TALOS-2018-0684

Scores

CVSS v3 9.8
EPSS 0.0974
EPSS Percentile 94.9%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-787
Status published
Products (3)
debian/debian_linux 8.0
debian/debian_linux 9.0
live555/live555_media_server 0.92
Published Oct 19, 2018
Tracked Since Feb 18, 2026