7/28/2019 Impact of ZRTP library critical security vulnerability Issue #5 SilentCircle:silent-phone-base GitHub

1/6

Issue #5

Open

0 comments

Labels

Browse Issues Milestones

Back to issue list

Sign up Sign inSign in

SilentCircle / silent-phone-base

CodeCode NetworkNetwork Pull RequestsPull Requests IssuesIssues GraphsGraphs00 22

New Issue

No milestoneNo one is assigned

hellais opened this issue 2 minutes ago

Impact of ZRTP library critical security vulnerability

I was wondering what the impact on your product these recently disclosed multiple critical vulnerabilities inside of the ZRTP

library used in silent circle.

https://webcache.googleusercontent.com/search?q=cache:http://blog.azimuthsecurity.com/2013/06/attacking-crypto-

phones-weaknesses-in.html

Are silent circle clients remotely exploitable due to these ZRTP library bugs?

I also noticed that some links have now disappeared from the sites where they were published. Just in case you missed

them here is an attached screenshot of the origin pages and uploaded a copy of the pdf's here:

Original Post (PDF print of web page from google page) http://temp-share.com/show/dPf3U597W

Chilling effect of original blog post (PDF print of the web page as now, without details) http://temp-share.com

/show/Pf3YC4p92

Article on the ThreatPost.com vulnerability website (this has been removed too) http://temp-share.com/show/f3Yg6hqkn

ExploreExplore FeaturesFeatures EnterpriseEnterprise BlogBlog

22 5 StarStar ForkFork

This repositoryThis repository ??

mpact of ZRTP library critical security vulnerability Issue #5 .. . https://github.com/SilentCircle/silent-phone-base/issues/5

of 6 6/27/13 6:05

7/28/2019 Impact of ZRTP library critical security vulnerability Issue #5 SilentCircle:silent-phone-base GitHub

2/6

mpact of ZRTP library critical security vulnerability Issue #5 .. . https://github.com/SilentCircle/silent-phone-base/issues/5

of 6 6/27/13 6:05

7/28/2019 Impact of ZRTP library critical security vulnerability Issue #5 SilentCircle:silent-phone-base GitHub

3/6

mpact of ZRTP library critical security vulnerability Issue #5 .. . https://github.com/SilentCircle/silent-phone-base/issues/5

of 6 6/27/13 6:05

7/28/2019 Impact of ZRTP library critical security vulnerability Issue #5 SilentCircle:silent-phone-base GitHub

4/6

mpact of ZRTP library critical security vulnerability Issue #5 .. . https://github.com/SilentCircle/silent-phone-base/issues/5

of 6 6/27/13 6:05

7/28/2019 Impact of ZRTP library critical security vulnerability Issue #5 SilentCircle:silent-phone-base GitHub

5/6

mpact of ZRTP library critical security vulnerability Issue #5 .. . https://github.com/SilentCircle/silent-phone-base/issues/5

of 6 6/27/13 6:05

7/28/2019 Impact of ZRTP library critical security vulnerability Issue #5 SilentCircle:silent-phone-base GitHub

6/6

1 participant

to join this discussion on GitHub . Already have an account? Sign in to commentSign up for freeSign up for free

Status Developer Training Shop Blog About 2013 GitHub, Inc. Terms Privacy Security Contact

mpact of ZRTP library critical security vulnerability Issue #5 .. . https://github.com/SilentCircle/silent-phone-base/issues/5

of 6 6/27/13 6:05