CVE-2013-2223 - Vulnerability Details - OpenCVE

GNU ZRTPCPP before 3.2.0 allows remote attackers to obtain sensitive information (uninitialized heap memory) or cause a denial of service (out-of-bounds read) via a crafted packet, as demonstrated by a truncated Ping packet that is not properly handled by the getEpHash function.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Network

Access Complexity Medium

Authentication None

Confidentiality Impact Partial

Integrity Impact None

Availability Impact Partial

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Wernerd	Zrtpcpp

Configuration 1 [-]

OR	cpe:2.3:a:wernerd:zrtpcpp::::::::
	cpe:2.3:a:wernerd:zrtpcpp:2.1.2:::::::*
	cpe:2.3:a:wernerd:zrtpcpp:2.2.0:::::::*
	cpe:2.3:a:wernerd:zrtpcpp:2.3.0:::::::*
	cpe:2.3:a:wernerd:zrtpcpp:3.0.0:alpha::::::
	cpe:2.3:a:wernerd:zrtpcpp:3.1.0:::::::*
	cpe:2.3:a:wernerd:zrtpcpp:3.2.0:::::::*

No data.

References

Link	Providers
http://blog.azimuthsecurity.com/2013/06/attacking-crypto-phones-weaknesses-in.html
http://lists.opensuse.org/opensuse-updates/2013-10/msg00052.html
http://lists.opensuse.org/opensuse-updates/2013-10/msg00053.html
http://seclists.org/oss-sec/2013/q2/638
http://secunia.com/advisories/53818
http://secunia.com/advisories/54998
http://security.gentoo.org/glsa/glsa-201309-13.xml
https://github.com/wernerd/ZRTPCPP/commit/4654f330317c9948bb61d138eb24d49690ca4637

History

No history.

MITRE

Status: PUBLISHED

Assigner: redhat

Published: 2013-10-04T17:00:00

Updated: 2024-08-06T15:27:41.118Z

Reserved: 2013-02-19T00:00:00

Link: CVE-2013-2223

Vulnrichment

No data.

NVD

Status : Deferred

Published: 2013-10-04T17:55:09.587

Modified: 2025-04-11T00:51:21.963

Link: CVE-2013-2223

Redhat

No data.

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2013-06-27T00:00:00", "descriptions": [{"lang": "en", "value": "GNU ZRTPCPP before 3.2.0 allows remote attackers to obtain sensitive information (uninitialized heap memory) or cause a denial of service (out-of-bounds read) via a crafted packet, as demonstrated by a truncated Ping packet that is not properly handled by the getEpHash function."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2018-01-08T21:57:01", "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat"}, "references": [{"name": "openSUSE-SU-2013:1600", "tags": ["vendor-advisory", "x_refsource_SUSE"], "url": "http://lists.opensuse.org/opensuse-updates/2013-10/msg00053.html"}, {"tags": ["x_refsource_CONFIRM"], "url": "https://github.com/wernerd/ZRTPCPP/commit/4654f330317c9948bb61d138eb24d49690ca4637"}, {"tags": ["x_refsource_MISC"], "url": "http://blog.azimuthsecurity.com/2013/06/attacking-crypto-phones-weaknesses-in.html"}, {"name": "54998", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/54998"}, {"name": "openSUSE-SU-2013:1599", "tags": ["vendor-advisory", "x_refsource_SUSE"], "url": "http://lists.opensuse.org/opensuse-updates/2013-10/msg00052.html"}, {"name": "GLSA-201309-13", "tags": ["vendor-advisory", "x_refsource_GENTOO"], "url": "http://security.gentoo.org/glsa/glsa-201309-13.xml"}, {"name": "[oss-security] 20130630 Re: CVE request: Multiple issues in GNU ZRTPCPP", "tags": ["mailing-list", "x_refsource_MLIST"], "url": "http://seclists.org/oss-sec/2013/q2/638"}, {"name": "53818", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/53818"}]}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-06T15:27:41.118Z"}, "title": "CVE Program Container", "references": [{"name": "openSUSE-SU-2013:1600", "tags": ["vendor-advisory", "x_refsource_SUSE", "x_transferred"], "url": "http://lists.opensuse.org/opensuse-updates/2013-10/msg00053.html"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://github.com/wernerd/ZRTPCPP/commit/4654f330317c9948bb61d138eb24d49690ca4637"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://blog.azimuthsecurity.com/2013/06/attacking-crypto-phones-weaknesses-in.html"}, {"name": "54998", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/54998"}, {"name": "openSUSE-SU-2013:1599", "tags": ["vendor-advisory", "x_refsource_SUSE", "x_transferred"], "url": "http://lists.opensuse.org/opensuse-updates/2013-10/msg00052.html"}, {"name": "GLSA-201309-13", "tags": ["vendor-advisory", "x_refsource_GENTOO", "x_transferred"], "url": "http://security.gentoo.org/glsa/glsa-201309-13.xml"}, {"name": "[oss-security] 20130630 Re: CVE request: Multiple issues in GNU ZRTPCPP", "tags": ["mailing-list", "x_refsource_MLIST", "x_transferred"], "url": "http://seclists.org/oss-sec/2013/q2/638"}, {"name": "53818", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/53818"}]}]}, "cveMetadata": {"assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "assignerShortName": "redhat", "cveId": "CVE-2013-2223", "datePublished": "2013-10-04T17:00:00", "dateReserved": "2013-02-19T00:00:00", "dateUpdated": "2024-08-06T15:27:41.118Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:wernerd:zrtpcpp:*:*:*:*:*:*:*:*", "matchCriteriaId": "91D694E9-06A4-403E-908A-A953237E1EA5", "versionEndIncluding": "3.2.1", "vulnerable": true}, {"criteria": "cpe:2.3:a:wernerd:zrtpcpp:2.1.2:*:*:*:*:*:*:*", "matchCriteriaId": "F3F4A3FA-4EC9-4CC5-ABCA-4858D2228242", "vulnerable": true}, {"criteria": "cpe:2.3:a:wernerd:zrtpcpp:2.2.0:*:*:*:*:*:*:*", "matchCriteriaId": "DB27C7A4-7124-4B7B-85E4-A5E196B697E0", "vulnerable": true}, {"criteria": "cpe:2.3:a:wernerd:zrtpcpp:2.3.0:*:*:*:*:*:*:*", "matchCriteriaId": "5932ACB9-2B8B-4C50-B175-734F4843F455", "vulnerable": true}, {"criteria": "cpe:2.3:a:wernerd:zrtpcpp:3.0.0:alpha:*:*:*:*:*:*", "matchCriteriaId": "68C2369A-8E40-45E2-84BC-B4DC6D01DB36", "vulnerable": true}, {"criteria": "cpe:2.3:a:wernerd:zrtpcpp:3.1.0:*:*:*:*:*:*:*", "matchCriteriaId": "224FED2C-D300-409F-B424-9BB65735B986", "vulnerable": true}, {"criteria": "cpe:2.3:a:wernerd:zrtpcpp:3.2.0:*:*:*:*:*:*:*", "matchCriteriaId": "C9BFF3A4-44CF-48DC-BA1B-D11B3F49FC00", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "GNU ZRTPCPP before 3.2.0 allows remote attackers to obtain sensitive information (uninitialized heap memory) or cause a denial of service (out-of-bounds read) via a crafted packet, as demonstrated by a truncated Ping packet that is not properly handled by the getEpHash function."}, {"lang": "es", "value": "GNU ZRTPCPP anterior a la versi\u00f3n 3.2.0 permite a atacantes remotos obtener informaci\u00f3n sensible (memoria din\u00e1mica sin inicializar) o provocar una denegaci\u00f3n de servicio (lectura fuera de l\u00edmite) a trav\u00e9s de un paquete manipulado, como se demostr\u00f3 con un Ping truncado que no es manejado adecuadamente por la funci\u00f3n getEpHash."}], "id": "CVE-2013-2223", "lastModified": "2025-04-11T00:51:21.963", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 5.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:P", "version": "2.0"}, "exploitabilityScore": 8.6, "impactScore": 4.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2013-10-04T17:55:09.587", "references": [{"source": "secalert@redhat.com", "tags": ["Exploit"], "url": "http://blog.azimuthsecurity.com/2013/06/attacking-crypto-phones-weaknesses-in.html"}, {"source": "secalert@redhat.com", "url": "http://lists.opensuse.org/opensuse-updates/2013-10/msg00052.html"}, {"source": "secalert@redhat.com", "url": "http://lists.opensuse.org/opensuse-updates/2013-10/msg00053.html"}, {"source": "secalert@redhat.com", "url": "http://seclists.org/oss-sec/2013/q2/638"}, {"source": "secalert@redhat.com", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/53818"}, {"source": "secalert@redhat.com", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/54998"}, {"source": "secalert@redhat.com", "url": "http://security.gentoo.org/glsa/glsa-201309-13.xml"}, {"source": "secalert@redhat.com", "tags": ["Patch"], "url": "https://github.com/wernerd/ZRTPCPP/commit/4654f330317c9948bb61d138eb24d49690ca4637"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit"], "url": "http://blog.azimuthsecurity.com/2013/06/attacking-crypto-phones-weaknesses-in.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://lists.opensuse.org/opensuse-updates/2013-10/msg00052.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://lists.opensuse.org/opensuse-updates/2013-10/msg00053.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://seclists.org/oss-sec/2013/q2/638"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/53818"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/54998"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://security.gentoo.org/glsa/glsa-201309-13.xml"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "https://github.com/wernerd/ZRTPCPP/commit/4654f330317c9948bb61d138eb24d49690ca4637"}], "sourceIdentifier": "secalert@redhat.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-119"}], "source": "nvd@nist.gov", "type": "Primary"}]}