Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveRedhatCVE-2013-2139
HistoryJan 16, 2014 - 5:05 a.m.

CVE-2013-2139

2014-01-1605:05:23
CWE-119
redhat
web.nvd.nist.gov
63
cve-2013-2139
buffer overflow
libsrtp
denial of service
nvd
security vulnerability
remote attackers

CVSS2

2.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:N/I:N/A:P

AI Score

7.2

Confidence

High

EPSS

0.016

Percentile

87.3%

JSON

Buffer overflow in srtp.c in libsrtp in srtp 1.4.5 and earlier allows remote attackers to cause a denial of service (crash) via vectors related to a length inconsistency in the crypto_policy_set_from_profile_for_rtp and srtp_protect functions.

Affected configurations

Nvd
Node
fedoraprojectfedoraMatch18
OR
fedoraprojectfedoraMatch19
OR
fedoraprojectfedoraMatch20
OR
opensuseopensuseMatch12.3
OR
opensuseopensuseMatch13.1
Node
ciscolibsrtpRange≤1.4.5
OR
ciscolibsrtpMatch1.0.1
OR
ciscolibsrtpMatch1.0.2
OR
ciscolibsrtpMatch1.0.4
OR
ciscolibsrtpMatch1.0.5
OR
ciscolibsrtpMatch1.0.6
OR
ciscolibsrtpMatch1.3.20
OR
ciscolibsrtpMatch1.4.0
OR
ciscolibsrtpMatch1.4.1
OR
ciscolibsrtpMatch1.4.2
OR
ciscolibsrtpMatch1.4.4
VendorProductVersionCPE
opensuseopensuse13.1cpe:/o:opensuse:opensuse:13.1:::
fedoraprojectfedora18cpe:/o:fedoraproject:fedora:18:::
fedoraprojectfedora19cpe:/o:fedoraproject:fedora:19:::
opensuseopensuse12.3cpe:/o:opensuse:opensuse:12.3:::
fedoraprojectfedora20cpe:/o:fedoraproject:fedora:20:::

Related

openvas 12
fedora 3
nessus 19
debian 2
mageia 1
securityvulns 2
ubuntucve 1
debiancve 1
gentoo 1
prion 1
cvelist 1
nvd 1
centos 1
amazon 1
oraclelinux 1
redhat 1
openvas
openvas
Huawei EulerOS: Security Advisory for libsrtp (EulerOS-SA-2020-1787)
2020-07-03 00:00:00
Huawei EulerOS: Security Advisory for libsrtp (EulerOS-SA-2019-2706)
2020-01-23 00:00:00
Debian: Security Advisory (DSA-2840-1)
2014-01-09 00:00:00
fedora
fedora
[SECURITY] Fedora 18 Update: libsrtp-1.4.4-9.20101004cvs.fc18
2014-01-08 07:46:55
[SECURITY] Fedora 20 Update: libsrtp-1.4.4-9.20101004cvs.fc20
2014-01-08 07:53:18
[SECURITY] Fedora 19 Update: libsrtp-1.4.4-9.20101004cvs.fc19
2014-01-08 07:49:01
nessus
nessus
Fedora 20 : libsrtp-1.4.4-9.20101004cvs.fc20 (2013-24153)
2014-01-09 00:00:00
openSUSE Security Update : srtp (openSUSE-SU-2014:1250-1)
2014-10-02 00:00:00
EulerOS Virtualization 3.0.6.0 : libsrtp (EulerOS-SA-2020-1787)
2020-07-01 00:00:00
debian
debian
[SECURITY] [DSA 2840-1] srtp security update
2014-01-10 17:48:09
[SECURITY] [DSA 2840-1] srtp security update
2014-01-10 17:48:09
mageia
mageia
Updated srtp package fixes security vulnerability
2014-11-21 15:44:16
securityvulns
securityvulns
[SECURITY] [DSA 2840-1] srtp security update
2014-01-14 00:00:00
Cisco srtp library buffer overflow
2014-01-14 00:00:00
ubuntucve
ubuntucve
CVE-2013-2139
2014-01-16 00:00:00
debiancve
debiancve
CVE-2013-2139
2014-01-16 05:05:00
gentoo
gentoo
libSRTP: Denial of service
2014-05-03 00:00:00
prion
prion
Buffer overflow
2014-01-16 05:05:00
cvelist
cvelist
CVE-2013-2139
2014-01-16 02:00:00
nvd
nvd
CVE-2013-2139
2014-01-16 05:05:23
centos
centos
libsrtp security update
2020-10-20 18:24:00
amazon
amazon
Medium: libsrtp
2020-10-22 18:18:00
oraclelinux
oraclelinux
libsrtp security and bug fix update
2020-10-06 00:00:00
redhat
redhat
(RHSA-2020:3873) Moderate: libsrtp security and bug fix update
2020-09-29 07:39:26

CVSS2

2.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:N/I:N/A:P

AI Score

7.2

Confidence

High

EPSS

0.016

Percentile

87.3%

JSON
Related for CVE-2013-2139
openvas12fedora3nessus19debian2mageia1securityvulns2ubuntucve1debiancve1gentoo1prion1cvelist1nvd1centos1amazon1oraclelinux1redhat1