PT-2014-1883

Name of the Vulnerable Software and Affected Versions libsrtp versions prior to 1.4.4 p20121108-r1 libsrtp version 1.4.5 and earlier Description The issue is related to a buffer overflow in the srtp.c file of the libsrtp package, which can be exploited remotely to cause a denial of service crash...

Cisco srtp library buffer overflow

cryptopolicysetfromprofileforrtp function byffer overflow...

[SECURITY] [DSA 2840-1] srtp security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2840-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso January 10, 2014 http://www.debian.org/security/faq -...

Debian DSA-2840-1 : srtp - buffer overflow

Fernando Russ from Groundworks Technologies reported a buffer overflow flaw in srtp, Cisco's reference implementation of the Secure Real-time Transport Protocol SRTP, in how the cryptopolicysetfromprofileforrtp function applies cryptographic profiles to an srtppolicy. A remote attacker could...

[SECURITY] [DSA 2840-1] srtp security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2840-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso January 10, 2014 http://www.debian.org/security/faq -...

DSA-2840-1 srtp - buffer overflow

Bulletin has no description...

Debian: Security Advisory (DSA-2840-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for libzrtpcpp FEDORA-2013-13018

Check for the Version of libzrtpcpp OpenVAS Vulnerability Test Fedora Update for libzrtpcpp FEDORA-2013-13018 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

[SECURITY] Fedora 17 Update: libzrtpcpp-2.3.4-1.fc17

This package provides a library that adds ZRTP support to the GNU ccRTP stack. Phil Zimmermann developed ZRTP to allow ad-hoc, easy to use key negotiation to setup Secure RTP SRTP sessions. GNU ZRTP together with GNU ccRTP 1.5.0 or later provides a ZRTP implementation that can be directly embedde...

[SECURITY] Fedora 18 Update: libzrtpcpp-2.3.4-1.fc18

This package provides a library that adds ZRTP support to the GNU ccRTP stack. Phil Zimmermann developed ZRTP to allow ad-hoc, easy to use key negotiation to setup Secure RTP SRTP sessions. GNU ZRTP together with GNU ccRTP 1.5.0 or later provides a ZRTP implementation that can be directly embedde...

Asterisk SRTP Video Stream Negotiation Remote Crash (AST-2012-001)

According to the version in its SIP banner, the version of Asterisk running on the remote host is potentially affected by a vulnerability that could allow a remote attacker to crash the server. The vulnerability can be triggered by attempting to negotiate a secure video stream when it has not bee...

NSA Develops New, Super-Secure Android Phone

The U.S. National Security Agency NSA released the specifications for a new, super-secure smartphone for use by government officials and based on Google’s widely-used Android operating system, inviting the public to make use of its research. The intelligence agency produced a limited run of about...

FreeBSD : asterisk -- SRTP Video Remote Crash Vulnerability (dd698b76-42f7-11e1-a1b6-14dae9ebcf89)

Asterisk project reports : An attacker attempting to negotiate a secure video stream can crash Asterisk if video support has not been enabled and the ressrtp Asterisk module is loaded. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

asterisk -- SRTP Video Remote Crash Vulnerability

Asterisk project reports: An attacker attempting to negotiate a secure video stream can crash Asterisk if video support has not been enabled and the ressrtp Asterisk module is loaded...

Authentication flaw

The SRTP implementation in Ingate Firewall before 4.6.0 and SIParator before 4.6.0 allows remote attackers to cause a denial of service kernel crash via an RTCP index that is "much more than expected."...

CVE-2007-6093: Improper Input Validation

The SRTP implementation in Ingate Firewall before 4.6.0 and SIParator before 4.6.0 allows remote attackers to cause a denial of service kernel crash via an RTCP index that is "much more than expected."...

CVE-2007-6093

CVE-2007-6093 affects Ingate Firewall and SIParator prior to 4.6.0; the SRTP implementation can be coerced into a kernel crash (DoS) by an RTCP index that is ‘much more than expected.’ Upgrading to version 4.6.0 or later is the stated mitigation.

CVE-2007-6093

The SRTP implementation in Ingate Firewall before 4.6.0 and SIParator before 4.6.0 allows remote attackers to cause a denial of service kernel crash via an RTCP index that is "much more than expected."...