Red Hat Security AdvisoryRHSA-2020:3873
libsrtp security and bug fix update
Released 2020-09-29 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) libsrtp-1.4.4-11.20101004cvs.el7
- Red Hat Enterprise Linux Client Optional (v. 7) libsrtp-devel-1.4.4-11.20101004cvs.el7
- Red Hat Enterprise Linux ComputeNode (v. 7) libsrtp-1.4.4-11.20101004cvs.el7
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) libsrtp-devel-1.4.4-11.20101004cvs.el7
- Red Hat Enterprise Linux Server (v. 7) libsrtp-1.4.4-11.20101004cvs.el7, libsrtp-1.4.4-11.20101004cvs.el7.ppc
- Red Hat Enterprise Linux Server Optional (v. 7) libsrtp-devel-1.4.4-11.20101004cvs.el7, libsrtp-devel-1.4.4-11.20101004cvs.el7.ppc
- Red Hat Enterprise Linux Workstation (v. 7) libsrtp-1.4.4-11.20101004cvs.el7
- Red Hat Enterprise Linux Workstation Optional (v. 7) libsrtp-devel-1.4.4-11.20101004cvs.el7
Fixes 2 records
Priority MEDIUM 44
The encryption-processing feature in Cisco libSRTP before 1.5.3 allows remote attackers to cause a denial of service via crafted fields in SRTP packets, aka Bug ID CSCux00686.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.08277 · Published 2016-04-21 · Fixed CWE-119
Priority LOW 19
Buffer overflow in srtp.c in libsrtp in srtp 1.4.5 and earlier allows remote attackers to cause a denial of service (crash) via vectors related to a length inconsistency in the crypto_policy_set_from_profile_for_rtp and…
CVSS 2.0LOW 2.6· Network · No auth · Interaction — · EPSS 0.0299 · Published 2014-01-16 · Fixed CWE-119
