CVE-2013-2139
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 3.0%
Buffer overflow in srtp.c in libsrtp in srtp 1.4.5 and earlier allows remote attackers to cause a denial of service (crash) via vectors related to a length inconsistency in the crypto_policy_set_from_profile_for_rtp and srtp_protect functions.
Produtos afetados
n/a · n/aReferências
http://advisories.mageia.org/MGASA-2014-0465.htmlhttp://lists.opensuse.org/opensuse-updates/2013-07/msg00083.htmlhttp://lists.opensuse.org/opensuse-updates/2014-09/msg00059.htmlhttp://lwn.net/Articles/579633/https://bugzilla.redhat.com/show_bug.cgi?id=970697http://seclists.org/fulldisclosure/2013/Jun/10https://github.com/cisco/libsrtp/pull/27http://www.debian.org/security/2014/dsa-2840http://www.mandriva.com/security/advisories?name=MDVSA-2014:219http://www.osvdb.org/93852