GCVE-110-MAGEIA-2014-465

Advisory Published

Vulnetix · Advisory published November 21, 2014

Fernando Russ from Groundworks Technologies reported a buffer overflow flaw in srtp, Cisco's reference implementation of the Secure Real-time Transport Protocol (SRTP), in how the crypto_policy_set_from_profile_for_rtp() function applies cryptographic profiles to an srtp_policy. A remote attacker could exploit this vulnerability to crash an application linked against libsrtp, resulting in a denial of service (CVE-2013-2139).

Download JSON Open in Console

Affected Products

Vendor	Product	Versions	Platforms
Mageia	srtp	1.4.4-3.1.mga3 (unaffected), 0 (affected)	—

References

Updated srtp package fixes security vulnerability

advisory

Updated srtp package fixes security vulnerability

advisory

Updated srtp package fixes security vulnerability

issue

Browse GCVE Records

73,053 records in the GCVE database · Updated July 16, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON