271 matches found
libsrtp
Introduction to libSRTP This package provides an implementation of the Secure Real-time Transport Protocol SRTP, the Universal Security Transform UST, and a supporting cryptographic kernel. The SRTP API is documented in include/srtp.h, and the library is in libsrtp2.a after compilation. This...
CVE-2026-116789
FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. Prior to 1.11.2, dtlsstatesetup compared a peer certificate with the SDP a=fingerprint only when FreeSWITCH was th...
CVE-2026-115928
FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. Prior to 1.11.2, switchcoremediaaddcrypto passed the encoded key and salt length from an inbound SDP a=crypto...
CVE-2026-116789 FreeSWITCH: DTLS-SRTP peer certificate is not bound to the SDP fingerprint when FreeSWITCH is the DTLS server
FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. Prior to 1.11.2, dtlsstatesetup compared a peer certificate with the SDP a=fingerprint only when FreeSWITCH was th...
CVE-2026-116789 FreeSWITCH: DTLS-SRTP peer certificate is not bound to the SDP fingerprint when FreeSWITCH is the DTLS server
FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. Prior to 1.11.2, dtlsstatesetup compared a peer certificate with the SDP a=fingerprint only when FreeSWITCH was th...
CVE-2026-116789
In versions prior to 1.11.2 , FreeSWITCH is vulnerable to a flaw where the dtls_state_setup() function fails to bind the peer certificate to the SDP a=fingerprint when acting as a DTLS server . An unauthenticated peer reaching the negotiated media port can complete the DTLS-SRTP handshake using a...
CVE-2026-116789 FreeSWITCH: DTLS-SRTP peer certificate is not bound to the SDP fingerprint when FreeSWITCH is the DTLS server
FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. Prior to 1.11.2, dtlsstatesetup compared a peer certificate with the SDP a=fingerprint only when FreeSWITCH was th...
PT-2026-137086
CVE-2026-119292: packets from the wrong source were rejected too late, after SRTP processing. A flood could stop one direction of call audio without the SRTP key. In our tests, 1.11.2 prevented complete starvation, though high-rate floods still caused loss...
libsrtp
Introduzione a libSRTP Questo pacchetto fornisce un'implementazione del Secure Real-time Transport Protocol SRTP, della Universal Security Transform UST e di un kernel crittografico di supporto. L'API SRTP è documentata in include/srtp.h, e la libreria si trova in libsrtp2.a dopo la compilazione...
RUSTSEC-2026-0335 Pre-shared key mode transmits the TGK in cleartext, exposing the SRTP master key
mykey implements MIKEY RFC 3830 for SRTP key exchange. Pre-shared key mode transmitted the TEK Generation Key TGK in the clear. MikeyMessage::newpskinit built its KEMAC payload with EncAlg::Null and placed the TGK in encdata verbatim. Anyone able to read a PSK-Init message therefore recovers the...
RUSTSEC-2026-0336 MIKEY message MAC is never verified on receive, so forged messages are accepted
mykey implements MIKEY RFC 3830 for SRTP key exchange. No receive path verified the MIKEY message authentication code. crypto::verifymac existed and was correct, but it was called only from unit tests — neither MikeyMessage::frombytes nor MikeyMessage::completepsk invoked it. newpskinit computed ...
Pre-shared key mode transmits the TGK in cleartext, exposing the SRTP master key
mykey implements MIKEY RFC 3830 for SRTP key exchange. Pre-shared key mode transmitted the TEK Generation Key TGK in the clear. MikeyMessage::newpskinit built its KEMAC payload with EncAlg::Null and placed the TGK in encdata verbatim. Anyone able to read a PSK-Init message therefore recovers the...
MIKEY message MAC is never verified on receive, so forged messages are accepted
mykey implements MIKEY RFC 3830 for SRTP key exchange. No receive path verified the MIKEY message authentication code. crypto::verifymac existed and was correct, but it was called only from unit tests — neither MikeyMessage::frombytes nor MikeyMessage::completepsk invoked it. newpskinit computed ...
libsrtp v2.8.1
Introduction to libSRTP This package provides an implementation of the Secure Real-time Transport Protocol SRTP, the Universal Security Transform UST, and a supporting cryptographic kernel. The SRTP API is documented in include/srtp.h, and the library is in libsrtp2.a after compilation. This...
CVE-2026-57162
A flaw was found in PJSIP. A stack buffer overflow exists in the SRTP/SDES media transport when processing a=crypto attributes during SDP offer/answer negotiation. A remote attacker can exploit this by sending an excessive number of a=crypto attributes in a single media description. This can resu...
Linux Distros Unpatched Vulnerability : CVE-2026-57162
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PJSIP is a free and open source multimedia communication library written in C. Prior to commit a1b707c, a stack buffer overflow exists in the SRTP/SDES media...
DEBIAN-CVE-2026-57162
PJSIP is a free and open source multimedia communication library written in C. Prior to commit a1b707c, a stack buffer overflow exists in the SRTP/SDES media transport when processing a=crypto attributes during SDP offer/answer sdesencodesdp in transportsrtpsdes.c. This affects applications with...
CVE-2026-57162
PJSIP is a free and open source multimedia communication library written in C. Prior to commit a1b707c, a stack buffer overflow exists in the SRTP/SDES media transport when processing a=crypto attributes during SDP offer/answer sdesencodesdp in transportsrtpsdes.c. This affects applications with...
CVE-2026-57162
CVE-2026-57162 is a stack buffer overflow in PJSIP 's SRTP/SDES media transport, specifically in sdes_encode_sdp() in transport_srtp_sdes.c. During SDP offer/answer negotiation, a=crypto attributes from a remote peer are collected into a fixed-size array without bounding their count. A remote att...
EUVD-2026-71656
PJSIP is a free and open source multimedia communication library written in C. Prior to commit a1b707c, a stack buffer overflow exists in the SRTP/SDES media transport when processing a=crypto attributes during SDP offer/answer sdesencodesdp in transportsrtpsdes.c. This affects applications with...