Lucene search

K
ubuntucveUbuntu.comUB:CVE-2013-2223
HistoryOct 04, 2013 - 12:00 a.m.

CVE-2013-2223

2013-10-0400:00:00
ubuntu.com
ubuntu.com
9

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:N/A:P

EPSS

0.026

Percentile

90.4%

GNU ZRTPCPP before 3.2.0 allows remote attackers to obtain sensitive
information (uninitialized heap memory) or cause a denial of service
(out-of-bounds read) via a crafted packet, as demonstrated by a truncated
Ping packet that is not properly handled by the getEpHash function.

Bugs

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:N/A:P

EPSS

0.026

Percentile

90.4%