NetSight
IP …
medium5.8

CVE-2013-2223

GNU ZRTPCPP before 3.2.0 allows remote attackers to obtain sensitive information (uninitialized heap memory) or cause a denial of service (out-of-bounds read) …

Impact

GNU ZRTPCPP before 3.2.0 allows remote attackers to obtain sensitive information (uninitialized heap memory) or cause a denial of service (out-of-bounds read) via a crafted packet, as demonstrated by a truncated Ping packet that is not properly handled by the getEpHash function.

Affected products

VendorProductAffected versions
WernerdZrtpcpp
through 3.2.1
Versions 2.1.2, 2.2.0, 2.3.0, 3.0.0, 3.1.0

Weakness classification

CWE-119

References