Skip to content
OpenAdvisories
Medium ELSA-2020-3873 2 CVEs

Moderate: libsrtp security and bug fix update (Oracle Linux 7)

Published Oct 6, 2020 · Updated Oct 6, 2020

Summary

[1.4.4-11.20101004cvs]
- Fix global buffer overflow
Resolves: bz#1301202

- Fix improper handling of CSRC count and extension header length in RTP header
Resolves: bz#1323705

- Fix buffer overflow in application of crypto profiles
Resolves: bz#1141897

Fixed packages 2

ReleasePackageFixed in
Oracle Linux · 7 libsrtp 0:1.4.4-11.20101004cvs.el7
Oracle Linux · 7 libsrtp-devel 0:1.4.4-11.20101004cvs.el7

Vulnerabilities 2

  • Unscored —

    Buffer overflow in srtp.c in libsrtp in srtp 1.4.5 and earlier allows remote attackers to cause a denial of service (cr…

  • Unscored —

    The encryption-processing feature in Cisco libSRTP before 1.5.3 allows remote attackers to cause a denial of service vi…