Lucene search
K

13 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2018-18108

Malware in sbrugna...

9.8CVSS9.5AI score0.00412EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2020/11/19 12:0 a.m.21 views

RHEL 7 : libsrtp (RHSA-2020:3873)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:3873 advisory. The libsrtp package provides an implementation of the Secure Real-time Transport Protocol SRTP, the Universal Security Transform UST, and a...

7.8CVSS7.7AI score0.18485EPSS
Exploits0References10
Tenable Nessus
Tenable Nessus
added 2020/10/20 12:0 a.m.83 views

CentOS 7 : libsrtp (RHSA-2020:3873)

The remote CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:3873 advisory. - Buffer overflow in srtp.c in libsrtp in srtp 1.4.5 and earlier allows remote attackers to cause a denial of service crash via vectors related to a...

7.8CVSS7.3AI score0.18485EPSS
Exploits0References3
Oracle linux
Oracle linux
added 2020/10/06 12:0 a.m.35 views

libsrtp security and bug fix update

1.4.4-11.20101004cvs - Fix global buffer overflow Resolves: bz1301202 - Fix improper handling of CSRC count and extension header length in RTP header Resolves: bz1323705 - Fix buffer overflow in application of crypto profiles Resolves: bz1141897...

7.8CVSS1.4AI score0.18485EPSS
Exploits0
RedHat Linux
RedHat Linux
added 2020/09/29 8:27 p.m.29 views

Moderate: Red Hat Security Advisory: libsrtp security and bug fix update

An update for libsrtp is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

7.8CVSS7.3AI score0.18485EPSS
Exploits0References6
RedHat Linux
RedHat Linux
added 2020/09/29 8:27 p.m.1 views

libsrtp: improper handling of CSRC count and extension header length in RTP header

The encryption-processing feature in Cisco libSRTP before 1.5.3 allows remote attackers to cause a denial of service via crafted fields in SRTP packets, aka Bug ID CSCux00686...

7.8CVSS5.9AI score0.18485EPSS
Exploits0References4
OSV
OSV
added 2016/04/02 12:0 a.m.14 views

DSA-3539-1 srtp - security update

Bulletin has no description...

7.8CVSS7.5AI score0.18485EPSS
Exploits0
OSV
OSV
added 2016/01/29 11:2 a.m.4 views

MGASA-2016-0037 Updated srtp packages fix security vulnerability

Srtp before 1.5.3 is vulnerable to a potential DoS attack due to lack of bounds checking on RTP header CSRC count and extension header length CVE-2015-6360...

7.8CVSS7.4AI score0.18485EPSS
Exploits0References3
Mageia
Mageia
added 2016/01/29 11:2 a.m.31 views

Updated srtp packages fix security vulnerability

Srtp before 1.5.3 is vulnerable to a potential DoS attack due to lack of bounds checking on RTP header CSRC count and extension header length CVE-2015-6360...

7.8CVSS7.4AI score0.18485EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2016/01/19 12:0 a.m.35 views

Debian DLA-393-1 : srtp security update

Prevent potential DoS attack due to lack of bounds checking on RTP header CSRC count and extension header length. Credit goes to Randell Jesup and the Firefox team for reporting this issue. As there is no aead mode available in the Squeeze version, only srtpunprotect needed to be patched NOTE:...

7.8CVSS7.1AI score0.18485EPSS
Exploits0References3
OSV
OSV
added 2016/01/17 12:0 a.m.12 views

DLA-393-1 srtp - security update

Bulletin has no description...

7.8CVSS7.5AI score0.18485EPSS
Exploits0
FreeBSD
FreeBSD
added 2015/11/02 12:0 a.m.23 views

libsrtp -- DoS via crafted RTP header vulnerability

libsrtp reports: Prevent potential DoS attack due to lack of bounds checking on RTP header CSRC count and extension header length. Credit goes to Randell Jesup and the Firefox team for reporting this issue...

7.8CVSS7.5AI score0.18485EPSS
Exploits0References5
seebug.org
seebug.org
added 2006/12/30 12:0 a.m.27 views

Tencent QQ SuperVideo Remote Denial of Service Vulnerability

QQ is a very popular IM in China developed by Tencent.There exists a remote denial of service vulnerability in QQ when using the SuperVideo chat.Current study showed that the attacker who successfully exploited the vulnerability would cause the remote client crash. There is an attack packet as...

6.8AI score
Exploits0
Rows per page
Query Builder