CVE-2013-2139: Buffer Overflow
A buffer overflow flaw was reported [1] in libsrtp, Cisco's reference implementation of the Secure Real-time Transport Protocol (SRTP), in how the cryptopolicysetfromprofileforrtp() function applies cryptographic profiles to an srtppolicy. This could allow for a crash of a client linked against libsrtp (like asterisk or linphone).
A pull request in git [2] has a patch to correct this issue.
[1] http://seclists.org/fulldisclosure/2013/Jun/10 [2] https://github.com/cisco/libsrtp/pull/26
Other sources
Buffer overflow in srtp.c in libsrtp in srtp 1.4.5 and earlier allows remote attackers to cause a denial of service (crash) via vectors related to a length inconsistency in the cryptopolicysetfromprofileforrtp and srtpprotect functions.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-2139?
CVE-2013-2139 is classified as a high severity vulnerability due to its potential to cause denial of service through a buffer overflow.
How do I fix CVE-2013-2139?
To mitigate CVE-2013-2139, update libsrtp to version 1.4.6 or later, which addresses the buffer overflow issue.
What software is affected by CVE-2013-2139?
CVE-2013-2139 affects libsrtp versions up to and including 1.4.5, as well as various versions of Fedora and openSUSE.
Can CVE-2013-2139 be exploited remotely?
Yes, CVE-2013-2139 can be exploited remotely by attackers to trigger a denial of service.
What functions are involved in CVE-2013-2139?
The vulnerability in CVE-2013-2139 is related to the crypto_policy_set_from_profile_for_rtp and srtp_protect functions in libsrtp.