Approved changes feed: RSS · Atom

cpe:2.3:a:cisco:libsrtp:1.4.4:*:*:*:*:*:*:*

part: a version: 1.4.4 update: *

VendorCisco (e1b3baff-aaf9-56a6-a68a-41e28ce616a5)
ProductLibsrtp (dddbfbe7-304b-5767-bf49-5cadf162838f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/srtp purl2cpe 2026-06-01 10:12:57.868724
pkg:deb/ubuntu/srtp purl2cpe 2026-06-01 10:12:57.868725
pkg:github/cisco/libsrtp purl2cpe 2026-06-01 10:12:57.868726
pkg:gitlab/redhat/libsrtp purl2cpe 2026-06-01 10:12:57.868728
pkg:rpm/centos/libsrtp purl2cpe 2026-06-01 10:12:57.868729
pkg:rpm/fedora/libsrtp purl2cpe 2026-06-01 10:12:57.868730
pkg:rpm/opensuse/libsrtp purl2cpe 2026-06-01 10:12:57.868732
pkg:sourceforge/srtp purl2cpe 2026-06-01 10:12:57.868733

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2013-2139 vulnerable 2026-06-08 05:03:58.579917 Details available
Buffer overflow in srtp.c in libsrtp in srtp 1.4.5 and earlier allows remote attackers to cause a denial of service (crash) via vectors related to a length inconsistency in the crypto_policy_set_from_profile_for_rtp and srtp_protect functions.
Published: 2014-01-16T02:00:00.000Z
Updated: 2024-08-06T15:27:40.955Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.