Vulnerability in OpenSSL - SRTP Memory Leak

A flaw in the DTLS SRTP extension parsing code allows an attacker, who sends a carefully crafted handshake message, to cause OpenSSL to fail to free up to 64k of memory causing a memory leak. This could be exploited in a Denial Of Service attack. This issue affects OpenSSL 1.0.1 server...

CVE-2014-3513

Memory leak in d1srtp.c in the DTLS SRTP extension in OpenSSL 1.0.1 before 1.0.1j allows remote attackers to cause a denial of service memory consumption via a crafted handshake message...

openSUSE Security Update : srtp (openSUSE-SU-2014:1250-1)

srtp was updated to fix a buffer overflow flaw that allowed remote attackers to cause a denial of service crash via vectors related to a length inconsistency in the cryptopolicysetfromprofileforrtp and srtpprotect functions. CVE-2013-2139. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

openSUSE Security Update : srtp (openSUSE-SU-2013:1258-1)

A buffer overflow in srtp was fixed which could potentially be used by attackers to crash srtp using applications and potentially execute code CVE-2013-2139, bnc828009. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...

CVE-2014-2907

The srtpaddaddress function in epan/dissectors/packet-rtp.c in the RTP dissector in Wireshark 1.10.x before 1.10.7 does not properly update SRTP conversation data, which allows remote attackers to cause a denial of service application crash via a crafted packet...

UBUNTU-CVE-2014-2907

The srtpaddaddress function in epan/dissectors/packet-rtp.c in the RTP dissector in Wireshark 1.10.x before 1.10.7 does not properly update SRTP conversation data, which allows remote attackers to cause a denial of service application crash via a crafted packet...

CVE-2014-2907

Wireshark 1.10.x before 1.10.7 is affected. The srtp_add_address function in epan/dissectors/packet-rtp.c does not properly update SRTP conversation data, allowing remote attackers to cause a denial of service (application crash) via a crafted RTP packet. Remediation: upgrade to Wireshark 1.10.7 ...

CVE-2014-2907

The srtpaddaddress function in epan/dissectors/packet-rtp.c in the RTP dissector in Wireshark 1.10.x before 1.10.7 does not properly update SRTP conversation data, which allows remote attackers to cause a denial of service application crash via a crafted packet...

PhonerLite 2.14 SIP Soft Phone - SIP Digest Disclosure

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 I. Advisory Summary Title: SIP Digest Leak Information Disclosure in PhonerLite 2.14 SIP Soft Phone Date Published: March 30, 2014 Vendors contacted: Heiko Sommerfeldt, PhonerLite author Discovered by: Jason Ostrom Severity: Medium II. Vulnerability...

Buffer overflow

Buffer overflow in srtp.c in libsrtp in srtp 1.4.5 and earlier allows remote attackers to cause a denial of service crash via vectors related to a length inconsistency in the cryptopolicysetfromprofileforrtp and srtpprotect functions...

CVE-2013-2139

Removed by vendor...

[SECURITY] [DSA 2840-1] srtp security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2840-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso January 10, 2014 http://www.debian.org/security/faq -...

Cisco srtp library buffer overflow

cryptopolicysetfromprofileforrtp function byffer overflow...

Debian DSA-2840-1 : srtp - buffer overflow

Fernando Russ from Groundworks Technologies reported a buffer overflow flaw in srtp, Cisco's reference implementation of the Secure Real-time Transport Protocol SRTP, in how the cryptopolicysetfromprofileforrtp function applies cryptographic profiles to an srtppolicy. A remote attacker could...

[SECURITY] [DSA 2840-1] srtp security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2840-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso January 10, 2014 http://www.debian.org/security/faq -...

DSA-2840-1 srtp - buffer overflow

Bulletin has no description...

Debian: Security Advisory (DSA-2840-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for libzrtpcpp FEDORA-2013-13018

Check for the Version of libzrtpcpp OpenVAS Vulnerability Test Fedora Update for libzrtpcpp FEDORA-2013-13018 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

[SECURITY] Fedora 17 Update: libzrtpcpp-2.3.4-1.fc17

This package provides a library that adds ZRTP support to the GNU ccRTP stack. Phil Zimmermann developed ZRTP to allow ad-hoc, easy to use key negotiation to setup Secure RTP SRTP sessions. GNU ZRTP together with GNU ccRTP 1.5.0 or later provides a ZRTP implementation that can be directly embedde...

[SECURITY] Fedora 18 Update: libzrtpcpp-2.3.4-1.fc18

This package provides a library that adds ZRTP support to the GNU ccRTP stack. Phil Zimmermann developed ZRTP to allow ad-hoc, easy to use key negotiation to setup Secure RTP SRTP sessions. GNU ZRTP together with GNU ccRTP 1.5.0 or later provides a ZRTP implementation that can be directly embedde...