MiracleLinux 7 : libsrtp-1.4.4-11.20101004cvs.el7 (AXSA:2020-568:01)

The remote MiracleLinux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2020-568:01 advisory. libsrtp: improper handling of CSRC count and extension header length in RTP header CVE-2015-6360 libsrtp: buffer overflow in application of crypto...

EUVD-2013-2104

Malware in sbrugna...

libsrtp: buffer overflow in application of crypto profiles

Buffer overflow in srtp.c in libsrtp in srtp 1.4.5 and earlier allows remote attackers to cause a denial of service crash via vectors related to a length inconsistency in the cryptopolicysetfromprofileforrtp and srtpprotect functions...

libsrtp -- DoS via crafted RTP header vulnerability

libsrtp reports: Prevent potential DoS attack due to lack of bounds checking on RTP header CSRC count and extension header length. Credit goes to Randell Jesup and the Firefox team for reporting this issue...