CVE-2013-2139: Buffer overflow in srtp.c in libsrtp in srtp 1.4.5 and earlier allows remote attackers to cause a denial of...

Security readout for executives and security teams

CVE-2013-2139 is a remote crash risk in libsrtp 1.4.5 and earlier. A length-handling inconsistency in SRTP processing can trigger a buffer overflow and denial of service. The source bundle does not provide CVSS, confirmed active exploitation, or a complete downstream product list. Exposure is most likely where libsrtp 1.4.5 or earlier is used directly or bundled by an application or OS package. The bundle does not identify specific downstream applications, CPEs, or deployment patterns, so asset confirmation is required. Treat as a targeted remediation item for systems using older libsrtp, especially externally reachable real-time media services. Business urgency is limited by absent CVSS and exploitation evidence, but remote crash potential makes unmanaged legacy deployments worth prompt inventory and patch review. Mitigation focus: Identify all direct and bundled libsrtp installations.; Update libsrtp through vendor or distribution-supported packages.; Review Debian, Fedora, SUSE, Mageia, Mandriva, and Cisco guidance where applicable..

Prepared

Jun 14, 2026, 14:50 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.