CVEvulnerability

CVE-2013-2139

2.6 LOW Published 2014-01-16 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2014-01-16
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
2.6 LOW — AV:N/AC:H/Au:N/C:N/I:N/A:P
Weaknesses
CWE-119

Description

Buffer overflow in srtp.c in libsrtp in srtp 1.4.5 and earlier allows remote attackers to cause a denial of service (crash) via vectors related to a length inconsistency in the crypto_policy_set_from_profile_for_rtp and srtp_protect functions.

Affected configurations

• fedoraproject fedora 18 • fedoraproject fedora 19 • fedoraproject fedora 20 • opensuse opensuse 12.3 • opensuse opensuse 13.1 • cisco libsrtp (<= 1.4.5) • cisco libsrtp 1.0.1 • cisco libsrtp 1.0.2 • cisco libsrtp 1.0.4 • cisco libsrtp 1.0.5 • cisco libsrtp 1.0.6 • cisco libsrtp 1.3.20 • cisco libsrtp 1.4.0 • cisco libsrtp 1.4.1 • cisco libsrtp 1.4.2 • cisco libsrtp 1.4.4

Related

Weakness · CWE (1)

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness

References