NVD

Id
38314  
Name
CVE-2013-2223  
Description
GNU ZRTPCPP before 3.2.0 allows remote attackers to obtain sensitive information (uninitialized heap memory) or cause a denial of service (out-of-bounds read) via a crafted packet, as demonstrated by a truncated Ping packet that is not properly handled by the getEpHash function.  
Reject
 
CVSS Version
2  
CVSS Score
5.8  
Severity
Medium  
CVSS Base Score
5.8  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:N/A:P)  
Pub Date
2017-01-18  
Published
2013-10-04  
Modified Date
2013-10-07  
Seq
2013-2223  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
195925 38314 CVE-2013-2223 http://blog.azimuthsecurity.com/2013/06/attacking-crypto-phones-weaknesses-in.html  View
195926 38314 CVE-2013-2223 [oss-security] 20130630 Re: CVE request: Multiple issues in GNU ZRTPCPP  View
195927 38314 CVE-2013-2223 GLSA-201309-13  View
195928 38314 CVE-2013-2223 https://github.com/wernerd/ZRTPCPP/commit/4654f330317c9948bb61d138eb24d49690ca4637  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
22952 JVNDB-2013-004527 GNU ZRTPCPP における重要な情報を取得される脆弱性 GNU ZRTPCPP には、重要な情報 (未初期化ヒープメモリ) を取得される、またはサービス運用妨害 (out-of-bounds read) 状態にされる脆弱性が存在します。 CVE-2013-2223 62165 CVE-2013-2223 38314 5.8 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-004527.html 2013-06-26 2013-10-09 View