1038 matches found
PT-2017-13258
Name of the Vulnerable Software and Affected Versions RTPproxy versions prior to 2.2.alpha.20160823 Description The issue allows remote attackers to obtain sensitive information or cause a denial of service via crafted RTP packets, due to a NAT feature not properly determining the IP address and...
asterisk -- RTP/RTCP information leak
The Asterisk project reports: This is a follow up advisory to AST-2017-005. Insufficient RTCP packet validation could allow reading stale buffer contents and when combined with the "nat" and "symmetricrtp" options allow redirecting where Asterisk sends the next RTCP report. The RTP stream...
asterisk -- Unauthorized data disclosure and shell access command injection in app_minivm
The Asterisk project reports: AST-2017-005 - A change was made to the strict RTP support in the RTP stack to better tolerate late media when a reinvite occurs. When combined with the symmetric RTP support this introduced an avenue where media could be hijacked. Instead of only learning a new...
CVE-2015-9048
In all Qualcomm products with Android releases from CAF using the Linux kernel, a vulnerability exists in the processing of lost RTP packets...
Code injection
In all Qualcomm products with Android releases from CAF using the Linux kernel, a vulnerability exists in the processing of lost RTP packets...
CVE-2015-9048
In all Qualcomm products with Android releases from CAF using the Linux kernel, a vulnerability exists in the processing of lost RTP packets...
CVE-2015-9048
CVE-2015-9048 affects Qualcomm closed‑source components in Android CAF builds using the Linux kernel, where the vulnerability is in the processing of lost RTP packets due to input validation issues. The CNVD entry describes an unauthorized operation possibility as the impact. The provided documen...
CVE-2015-9048: Improper Input Validation
In all Qualcomm products with Android releases from CAF using the Linux kernel, a vulnerability exists in the processing of lost RTP packets...
PT-2017-2690
Name of the Vulnerable Software and Affected Versions Qualcomm products with Android releases from CAF using the Linux kernel affected versions not specified Description A vulnerability exists in the processing of lost RTP packets, potentially allowing a remote attacker to impact the...
Asterisk Open Source and Certified Asterisk RTP Resource Exhaustion DoS Vulnerability
Asterisk Open Source and Certified Asterisk are prone to a remote denial of service DoS vulnerability. This VT has been deprecated since this check is already covered in SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyrigh...
Open Source SIP Sniffer: pcapsipdump
Open Source SIP Sniffer pcapsipdump is libpcap-based SIP sniffer with per-call sorting capabilities. It writes SIP/RTP sessions to disk in a same format, as “tcpdump -w”, but one file per SIP session even if there is thousands of concurrent SIP sessions. Each session goes in a separate, fancy-nam...
Cisco TelePresence VCS / Expressway < 8.8.2 Received Packet Parser DoS
According to its self-reported version, the Cisco TelePresence Video Communication Server VCS / Expressway running on the remote host is prior to 8.8.2. It is, therefore, affected by a denial of service vulnerability in the received packet parser due to insufficient size validation of user-suppli...
Buffer overflow
A vulnerability in the received packet parser of Cisco Expressway Series and Cisco TelePresence Video Communication Server VCS software could allow an unauthenticated, remote attacker to cause a reload of the affected system, resulting in a denial of service DoS condition. The vulnerability is du...
CVE-2017-3790
A vulnerability in the received packet parser of Cisco Expressway Series and Cisco TelePresence Video Communication Server VCS software could allow an unauthenticated, remote attacker to cause a reload of the affected system, resulting in a denial of service DoS condition. The vulnerability is du...
CVE-2017-3790
A vulnerability in the received packet parser of Cisco Expressway Series and Cisco TelePresence Video Communication Server VCS software could allow an unauthenticated, remote attacker to cause a reload of the affected system, resulting in a denial of service DoS condition. The vulnerability is du...
CVE-2017-3790
CVE-2017-3790 affects Cisco Expressway Series and Cisco TelePresence VCS Software prior to 8.8.2. The flaw arises from insufficient size validation in the received-packet parser, allowing an unauthenticated remote attacker to send crafted H.224 data in RTP within an H.323 call to overflow a cache...
CVE-2017-3790: Improper Input Validation
A vulnerability in the received packet parser of Cisco Expressway Series and Cisco TelePresence Video Communication Server VCS software could allow an unauthenticated, remote attacker to cause a reload of the affected system, resulting in a denial of service DoS condition. The vulnerability is du...
PT-2017-16097
Name of the Vulnerable Software and Affected Versions Cisco Expressway Series Software versions prior to X8.8.2 Cisco TelePresence VCS Software versions prior to X8.8.2 Description A vulnerability in the received packet parser could allow an unauthenticated, remote attacker to cause a reload of t...
