[ GLSA 201309-13 ] GNU ZRTP: Multiple vulnerabilities

[GLSA]

Gentoo Linux Security Advisory

Title: GNU ZRTP: Multiple vulnerabilities (GLSA 201309-13)
Severity: normal
Exploitable: remote
Date: September 24, 2013
Bug(s): #481228
ID: 201309-13

Synopsis

Multiple vulnerabilities have been found in GNU ZRTP, some of which
may allow execution of arbitrary code.


Background

GNU ZRTP is a C++ implementation of the ZRTP protocol.

Affected Packages

Package: net-libs/libzrtpcpp
Vulnerable: < 2.3.4
Unaffected: >= 2.3.4
Architectures: All supported architectures


Description

Multiple vulnerabilities have been discovered in GNU ZRTP. Please review
the CVE identifiers referenced below for details.


Impact

A remote attacker could possibly execute arbitrary code with the
privileges of the process, cause a Denial of Service condition, or obtain
sensitive information.


Workaround

There is no known workaround at this time.

Resolution

All GNU ZRTP users should upgrade to the latest version: