Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2013-2139
HistoryJan 16, 2014 - 5:05 a.m.

CVE-2013-2139

2014-01-1605:05:23
CWE-119
[email protected]
web.nvd.nist.gov

2.6 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:N/I:N/A:P

7.3 High

AI Score

Confidence

High

0.016 Low

EPSS

Percentile

87.3%

JSON

Buffer overflow in srtp.c in libsrtp in srtp 1.4.5 and earlier allows remote attackers to cause a denial of service (crash) via vectors related to a length inconsistency in the crypto_policy_set_from_profile_for_rtp and srtp_protect functions.

Affected configurations

NVD
Node
fedoraprojectfedoraMatch18
OR
fedoraprojectfedoraMatch19
OR
fedoraprojectfedoraMatch20
OR
opensuseopensuseMatch12.3
OR
opensuseopensuseMatch13.1
Node
ciscolibsrtpRange≤1.4.5
OR
ciscolibsrtpMatch1.0.1
OR
ciscolibsrtpMatch1.0.2
OR
ciscolibsrtpMatch1.0.4
OR
ciscolibsrtpMatch1.0.5
OR
ciscolibsrtpMatch1.0.6
OR
ciscolibsrtpMatch1.3.20
OR
ciscolibsrtpMatch1.4.0
OR
ciscolibsrtpMatch1.4.1
OR
ciscolibsrtpMatch1.4.2
OR
ciscolibsrtpMatch1.4.4

Related

cve 1
nessus 19
openvas 12
fedora 3
debian 2
mageia 1
debiancve 1
gentoo 1
securityvulns 2
prion 1
cvelist 1
ubuntucve 1
amazon 1
oraclelinux 1
redhat 1
centos 1
cve
cve
CVE-2013-2139
2014-01-16 05:05:23
nessus
nessus
openSUSE Security Update : srtp (openSUSE-SU-2014:1250-1)
2014-10-02 00:00:00
Fedora 20 : libsrtp-1.4.4-9.20101004cvs.fc20 (2013-24153)
2014-01-09 00:00:00
EulerOS 2.0 SP5 : libsrtp (EulerOS-SA-2019-2706)
2019-12-23 00:00:00
openvas
openvas
Debian: Security Advisory (DSA-2840-1)
2014-01-09 00:00:00
Huawei EulerOS: Security Advisory for libsrtp (EulerOS-SA-2019-2706)
2020-01-23 00:00:00
Huawei EulerOS: Security Advisory for libsrtp (EulerOS-SA-2020-1787)
2020-07-03 00:00:00
fedora
fedora
[SECURITY] Fedora 18 Update: libsrtp-1.4.4-9.20101004cvs.fc18
2014-01-08 07:46:55
[SECURITY] Fedora 20 Update: libsrtp-1.4.4-9.20101004cvs.fc20
2014-01-08 07:53:18
[SECURITY] Fedora 19 Update: libsrtp-1.4.4-9.20101004cvs.fc19
2014-01-08 07:49:01
debian
debian
[SECURITY] [DSA 2840-1] srtp security update
2014-01-10 17:48:09
[SECURITY] [DSA 2840-1] srtp security update
2014-01-10 17:48:09
mageia
mageia
Updated srtp package fixes security vulnerability
2014-11-21 15:44:16
debiancve
debiancve
CVE-2013-2139
2014-01-16 05:05:00
gentoo
gentoo
libSRTP: Denial of service
2014-05-03 00:00:00
securityvulns
securityvulns
[SECURITY] [DSA 2840-1] srtp security update
2014-01-14 00:00:00
Cisco srtp library buffer overflow
2014-01-14 00:00:00
prion
prion
Buffer overflow
2014-01-16 05:05:00
cvelist
cvelist
CVE-2013-2139
2014-01-16 02:00:00
ubuntucve
ubuntucve
CVE-2013-2139
2014-01-16 00:00:00
amazon
amazon
Medium: libsrtp
2020-10-22 18:18:00
oraclelinux
oraclelinux
libsrtp security and bug fix update
2020-10-06 00:00:00
redhat
redhat
(RHSA-2020:3873) Moderate: libsrtp security and bug fix update
2020-09-29 07:39:26
centos
centos
libsrtp security update
2020-10-20 18:24:00

2.6 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:N/I:N/A:P

7.3 High

AI Score

Confidence

High

0.016 Low

EPSS

Percentile

87.3%

JSON
Related for NVD:CVE-2013-2139
cve1nessus19openvas12fedora3debian2mageia1debiancve1gentoo1securityvulns2prion1cvelist1ubuntucve1amazon1oraclelinux1redhat1centos1