Lucene search
CiscoCISCO-SA-20160420-LIBSRTPHistoryApr 20, 2016 - 4:00 p.m.
Multiple Cisco Products libSRTP Denial of Service Vulnerability
2016-04-2016:00:00
tools.cisco.com
15
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
7.8 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:N/I:N/A:C
0.026 Low
EPSS
Percentile
90.3%
Cisco released version 1.5.3 of the Secure Real-Time Transport Protocol (SRTP) library (libSRTP), which addresses a denial of service (DoS) vulnerability. Multiple Cisco products incorporate a vulnerable version of the libSRTP library.
The vulnerability is in the encryption processing subsystem of libSRTP and could allow an unauthenticated, remote attacker to trigger a DoS condition. The vulnerability is due to improper input validation of certain fields of SRTP packets. An attacker could exploit this vulnerability by sending a crafted SRTP packet designed to trigger the issue to an affected device.
The impact of this vulnerability on Cisco products may vary depending on the affected product. Details about the impact on each product are outlined in the “Conditions” section of each Cisco bug for this vulnerability. The bug IDs are listed at the top of this advisory and in the table in “Vulnerable Products.”
This advisory is available at the following link:
Affected configurations
Node
ciscoadaptive_security_appliance_softwareMatch8.2
ORciscoadaptive_security_appliance_softwareMatch8.1
ORciscoadaptive_security_appliance_softwareMatch8.3
ORciscoadaptive_security_appliance_softwareMatch8.4
ORciscoadaptive_security_appliance_softwareMatch8.5
ORciscoadaptive_security_appliance_softwareMatch8.6
ORciscoadaptive_security_appliance_softwareMatch8.7
ORciscoadaptive_security_appliance_softwareMatch9.0
ORciscoadaptive_security_appliance_softwareMatch9.1
ORciscoadaptive_security_appliance_softwareMatch9.2
ORciscoadaptive_security_appliance_softwareMatch9.3
ORciscounified_wireless_ip_phone_7920Matchany
ORciscounity_connectionMatchany
ORciscounified_communications_managerMatchany
ORciscoios_xeMatch3.7S
ORciscoios_xeMatch3.8S
ORciscoios_xeMatch3.9S
ORciscoios_xeMatch3.10S
ORciscoios_xeMatch3.11S
ORciscoios_xeMatch3.12S
ORciscoios_xeMatch3.13S
ORciscoios_xeMatch3.14S
ORciscoios_xeMatch3.15S
ORciscoios_xeMatch3.16S
ORciscoios_xeMatch3.17S
ORciscowebex_meeting_centerMatchany
ORciscounified_ip_phone_8900_series_firmwareMatchany
ORciscoip_phone_8800_seriesMatchany
ORciscojabber_software_development_kitMatchany
ORciscodx_series_ip_phones_firmwareMatchany
ORciscoip_phone_7800_series_firmwareMatchany
ORciscounified_ip_phone_7900_series_firmwareMatchany
ORciscounified_ip_phone_6900_series_firmwareMatchany
ORciscoadaptive_security_appliance_softwareMatch8.2.0.45
ORciscoadaptive_security_appliance_softwareMatch8.2.1
ORciscoadaptive_security_appliance_softwareMatch8.2.2
ORciscoadaptive_security_appliance_softwareMatch8.2.2.10
ORciscoadaptive_security_appliance_softwareMatch8.2.3
ORciscoadaptive_security_appliance_softwareMatch8.2.4
ORciscoadaptive_security_appliance_softwareMatch8.2.1.11
ORciscoadaptive_security_appliance_softwareMatch8.2.2.9
ORciscoadaptive_security_appliance_softwareMatch8.2.2.12
ORciscoadaptive_security_appliance_softwareMatch8.2.2.16
ORciscoadaptive_security_appliance_softwareMatch8.2.4.1
ORciscoadaptive_security_appliance_softwareMatch8.2.4.4
ORciscoadaptive_security_appliance_softwareMatch8.2.5
ORciscoadaptive_security_appliance_softwareMatch8.2.5.13
ORciscoadaptive_security_appliance_softwareMatch8.2.5.22
ORciscoadaptive_security_appliance_softwareMatch8.2.5.26
ORciscoadaptive_security_appliance_softwareMatch8.2.2.17
ORciscoadaptive_security_appliance_softwareMatch8.2.5.33
ORciscoadaptive_security_appliance_softwareMatch8.2.5.40
ORciscoadaptive_security_appliance_softwareMatch8.2.5.41
ORciscoadaptive_security_appliance_softwareMatch8.2.5.46
ORciscoadaptive_security_appliance_softwareMatch8.2.5.48
ORciscoadaptive_security_appliance_softwareMatch8.2.5.50
ORciscoadaptive_security_appliance_softwareMatch8.2.5.52
ORciscoadaptive_security_appliance_softwareMatch8.2.5.55
ORciscoadaptive_security_appliance_softwareMatch8.2.5.57
ORciscoadaptive_security_appliance_softwareMatch8.1.0.104
ORciscoadaptive_security_appliance_softwareMatch8.3.1.1
ORciscoadaptive_security_appliance_softwareMatch8.3.1
ORciscoadaptive_security_appliance_softwareMatch8.3.2
ORciscoadaptive_security_appliance_softwareMatch8.3.2.23
ORciscoadaptive_security_appliance_softwareMatch8.3.2.25
ORciscoadaptive_security_appliance_softwareMatch8.3.1.4
ORciscoadaptive_security_appliance_softwareMatch8.3.1.6
ORciscoadaptive_security_appliance_softwareMatch8.3.2.4
ORciscoadaptive_security_appliance_softwareMatch8.3.2.13
ORciscoadaptive_security_appliance_softwareMatch8.3.2.31
ORciscoadaptive_security_appliance_softwareMatch8.3.2.33
ORciscoadaptive_security_appliance_softwareMatch8.3.2.34
ORciscoadaptive_security_appliance_softwareMatch8.3.2.37
ORciscoadaptive_security_appliance_softwareMatch8.3.2.39
ORciscoadaptive_security_appliance_softwareMatch8.3.2.40
ORciscoadaptive_security_appliance_softwareMatch8.3.2.41
ORciscoadaptive_security_appliance_softwareMatch8.3.2.44
ORciscoadaptive_security_appliance_softwareMatch8.4.1
ORciscoadaptive_security_appliance_softwareMatch8.4.2
ORciscoadaptive_security_appliance_softwareMatch8.4.1.3
ORciscoadaptive_security_appliance_softwareMatch8.4.1.11
ORciscoadaptive_security_appliance_softwareMatch8.4.2.8
ORciscoadaptive_security_appliance_softwareMatch8.4.3
ORciscoadaptive_security_appliance_softwareMatch8.4.3.8
ORciscoadaptive_security_appliance_softwareMatch8.4.3.9
ORciscoadaptive_security_appliance_softwareMatch8.4.4
ORciscoadaptive_security_appliance_softwareMatch8.4.4.1
ORciscoadaptive_security_appliance_softwareMatch8.4.4.3
ORciscoadaptive_security_appliance_softwareMatch8.4.4.5
ORciscoadaptive_security_appliance_softwareMatch8.4.4.9
ORciscoadaptive_security_appliance_softwareMatch8.4.5
ORciscoadaptive_security_appliance_softwareMatch8.4.5.6
ORciscoadaptive_security_appliance_softwareMatch8.4.6
ORciscoadaptive_security_appliance_softwareMatch8.4.2.1
ORciscoadaptive_security_appliance_softwareMatch8.4.7
ORciscoadaptive_security_appliance_softwareMatch8.4.7.3
ORciscoadaptive_security_appliance_softwareMatch8.4.7.15
ORciscoadaptive_security_appliance_softwareMatch8.4.7.22
ORciscoadaptive_security_appliance_softwareMatch8.4.7.23
ORciscoadaptive_security_appliance_softwareMatch8.4.7.26
ORciscoadaptive_security_appliance_softwareMatch8.4.7.28
ORciscoadaptive_security_appliance_softwareMatch8.4.7.29
ORciscoadaptive_security_appliance_softwareMatch8.5.1
ORciscoadaptive_security_appliance_softwareMatch8.5.1.1
ORciscoadaptive_security_appliance_softwareMatch8.5.1.6
ORciscoadaptive_security_appliance_softwareMatch8.5.1.7
ORciscoadaptive_security_appliance_softwareMatch8.5.1.14
ORciscoadaptive_security_appliance_softwareMatch8.5.1.17
ORciscoadaptive_security_appliance_softwareMatch8.5.1.18
ORciscoadaptive_security_appliance_softwareMatch8.5.1.19
ORciscoadaptive_security_appliance_softwareMatch8.5.1.21
ORciscoadaptive_security_appliance_softwareMatch8.5.1.24
ORciscoadaptive_security_appliance_softwareMatch8.6.1.1
ORciscoadaptive_security_appliance_softwareMatch8.6.1
ORciscoadaptive_security_appliance_softwareMatch8.6.1.2
ORciscoadaptive_security_appliance_softwareMatch8.6.1.5
ORciscoadaptive_security_appliance_softwareMatch8.6.1.10
ORciscoadaptive_security_appliance_softwareMatch8.6.1.12
ORciscoadaptive_security_appliance_softwareMatch8.6.1.13
ORciscoadaptive_security_appliance_softwareMatch8.6.1.14
ORciscoadaptive_security_appliance_softwareMatch8.6.1.17
ORciscoadaptive_security_appliance_softwareMatch8.7.1
ORciscoadaptive_security_appliance_softwareMatch8.7.1.1
ORciscoadaptive_security_appliance_softwareMatch8.7.1.3
ORciscoadaptive_security_appliance_softwareMatch8.7.1.4
ORciscoadaptive_security_appliance_softwareMatch8.7.1.7
ORciscoadaptive_security_appliance_softwareMatch8.7.1.8
ORciscoadaptive_security_appliance_softwareMatch8.7.1.11
ORciscoadaptive_security_appliance_softwareMatch8.7.1.13
ORciscoadaptive_security_appliance_softwareMatch8.7.1.16
ORciscoadaptive_security_appliance_softwareMatch8.7.1.17
ORciscoadaptive_security_appliance_softwareMatch9.0.1
ORciscoadaptive_security_appliance_softwareMatch9.0.2
ORciscoadaptive_security_appliance_softwareMatch9.0.2.10
ORciscoadaptive_security_appliance_softwareMatch9.0.3
ORciscoadaptive_security_appliance_softwareMatch9.0.3.6
ORciscoadaptive_security_appliance_softwareMatch9.0.3.8
ORciscoadaptive_security_appliance_softwareMatch9.0.4
ORciscoadaptive_security_appliance_softwareMatch9.0.4.1
ORciscoadaptive_security_appliance_softwareMatch9.0.4.5
ORciscoadaptive_security_appliance_softwareMatch9.0.4.17
ORciscoadaptive_security_appliance_softwareMatch9.0.4.20
ORciscoadaptive_security_appliance_softwareMatch9.0.4.24
ORciscoadaptive_security_appliance_softwareMatch9.0.4.7
ORciscoadaptive_security_appliance_softwareMatch9.0.4.26
ORciscoadaptive_security_appliance_softwareMatch9.0.4.29
ORciscoadaptive_security_appliance_softwareMatch9.0.4.33
ORciscoadaptive_security_appliance_softwareMatch9.0.4.37
ORciscoadaptive_security_appliance_softwareMatch9.0.4.35
ORciscoadaptive_security_appliance_softwareMatch9.1.1
ORciscoadaptive_security_appliance_softwareMatch9.1.1.4
ORciscoadaptive_security_appliance_softwareMatch9.1.2
ORciscoadaptive_security_appliance_softwareMatch9.1.3
ORciscoadaptive_security_appliance_softwareMatch9.1.2.8
ORciscoadaptive_security_appliance_softwareMatch9.1.3.2
ORciscoadaptive_security_appliance_softwareMatch9.1.4
ORciscoadaptive_security_appliance_softwareMatch9.1.4.5
ORciscoadaptive_security_appliance_softwareMatch9.1.5
ORciscoadaptive_security_appliance_softwareMatch9.1.5.10
ORciscoadaptive_security_appliance_softwareMatch9.1.5.12
ORciscoadaptive_security_appliance_softwareMatch9.1.5.15
ORciscoadaptive_security_appliance_softwareMatch9.1.6
ORciscoadaptive_security_appliance_softwareMatch9.1.5.21
ORciscoadaptive_security_appliance_softwareMatch9.1.6.1
ORciscoadaptive_security_appliance_softwareMatch9.1.6.6
ORciscoadaptive_security_appliance_softwareMatch9.1.6.4
ORciscoadaptive_security_appliance_softwareMatch9.1.6.8
ORciscoadaptive_security_appliance_softwareMatch9.1.6.10
ORciscoadaptive_security_appliance_softwareMatch9.2.1
ORciscoadaptive_security_appliance_softwareMatch9.2.2
ORciscoadaptive_security_appliance_softwareMatch9.2.2.4
ORciscoadaptive_security_appliance_softwareMatch9.2.2.7
ORciscoadaptive_security_appliance_softwareMatch9.2.3
ORciscoadaptive_security_appliance_softwareMatch9.2.2.8
ORciscoadaptive_security_appliance_softwareMatch9.2.3.3
ORciscoadaptive_security_appliance_softwareMatch9.2.3.4
ORciscoadaptive_security_appliance_softwareMatch9.2.0.0
ORciscoadaptive_security_appliance_softwareMatch9.2.0.104
ORciscoadaptive_security_appliance_softwareMatch9.2.3.1
ORciscoadaptive_security_appliance_softwareMatch9.2.4
ORciscoadaptive_security_appliance_softwareMatch9.3.1
ORciscoadaptive_security_appliance_softwareMatch9.3.1.1
ORciscoadaptive_security_appliance_softwareMatch9.3.2
ORciscoadaptive_security_appliance_softwareMatch9.3.2.2
ORciscoadaptive_security_appliance_softwareMatch9.3.3
ORciscoadaptive_security_appliance_softwareMatch9.3.5
ORciscoadaptive_security_appliance_softwareMatch9.3.3.1
ORciscoadaptive_security_appliance_softwareMatch9.3.3.2
ORciscoadaptive_security_appliance_softwareMatch9.3.3.5
ORciscounified_wireless_ip_phone_7920Match7920
ORciscounity_connectionMatchany
ORciscounified_communications_managerMatchany
ORciscoios_xeMatch3.7.0S
ORciscoios_xeMatch3.7.1S
ORciscoios_xeMatch3.7.2S
ORciscoios_xeMatch3.7.3S
ORciscoios_xeMatch3.7.4S
ORciscoios_xeMatch3.7.5S
ORciscoios_xeMatch3.7.6S
ORciscoios_xeMatch3.7.7S
ORciscoios_xeMatch3.7.8S
ORciscoios_xeMatch3.7.4aS
ORciscoios_xeMatch3.7.2tS
ORciscoios_xeMatch3.7.0bS
ORciscoios_xeMatch3.7.1aS
ORciscoios_xeMatch3.8.0S
ORciscoios_xeMatch3.8.1S
ORciscoios_xeMatch3.8.2S
ORciscoios_xeMatch3.9.1S
ORciscoios_xeMatch3.9.0S
ORciscoios_xeMatch3.9.2S
ORciscoios_xeMatch3.9.1aS
ORciscoios_xeMatch3.9.0aS
ORciscoios_xeMatch3.10.0S
ORciscoios_xeMatch3.10.1S
ORciscoios_xeMatch3.10.2S
ORciscoios_xeMatch3.10.3S
ORciscoios_xeMatch3.10.4S
ORciscoios_xeMatch3.10.5S
ORciscoios_xeMatch3.10.6S
ORciscoios_xeMatch3.10.2aS
ORciscoios_xeMatch3.10.2tS
ORciscoios_xeMatch3.11.1S
ORciscoios_xeMatch3.11.2S
ORciscoios_xeMatch3.11.0S
ORciscoios_xeMatch3.11.3S
ORciscoios_xeMatch3.11.4S
ORciscoios_xeMatch3.12.0S
ORciscoios_xeMatch3.12.1S
ORciscoios_xeMatch3.12.2S
ORciscoios_xeMatch3.12.3S
ORciscoios_xeMatch3.12.0aS
ORciscoios_xeMatch3.12.4S
ORciscoios_xeMatch3.13.0S
ORciscoios_xeMatch3.13.1S
ORciscoios_xeMatch3.13.2S
ORciscoios_xeMatch3.13.3S
ORciscoios_xeMatch3.13.4S
ORciscoios_xeMatch3.13.2aS
ORciscoios_xeMatch3.13.0aS
ORciscoios_xeMatch3.14.0S
ORciscoios_xeMatch3.14.1S
ORciscoios_xeMatch3.14.2S
ORciscoios_xeMatch3.15.0S
ORciscoios_xeMatch3.15.1S
ORciscoios_xeMatch3.15.2S
ORciscoios_xeMatch3.15.1cS
ORciscoios_xeMatch3.16.0S
ORciscoios_xeMatch3.16.1S
ORciscoios_xeMatch3.16.0aS
ORciscoios_xeMatch3.16.1aS
ORciscoios_xeMatch3.16.0bS
ORciscoios_xeMatch3.16.0cS
ORciscoios_xeMatch3.17.0S
ORciscowebex_meeting_centerMatchany
ORciscounified_ip_phoneMatch8900 Series
ORciscoip_phoneMatch8800 Series Software
ORciscojabber_software_development_kitMatchany
ORciscodx_series_ip_phones_firmwareMatchany
ORciscoip_phoneMatch7800 Series
ORciscounified_ip_phoneMatch7900 Series
ORciscounified_ip_phoneMatch6900 Series
Related
openvas
openvas
Debian: Security Advisory (DLA-393-1)
2023-03-08 00:00:00
Mageia: Security Advisory (MGASA-2016-0037)
2016-02-02 00:00:00
cve
cve
CVE-2015-6360
2016-04-21 10:59:00
cvelist
cvelist
CVE-2015-6360
2016-04-21 10:00:00
nessus
nessus
Debian DLA-393-1 : srtp security update
2016-01-19 00:00:00
openSUSE Security Update : libsrtp (openSUSE-2016-1063)
2016-09-09 00:00:00
Cisco IOS XE libsrtp DoS (CSCux04317)
2016-06-22 00:00:00
freebsd
freebsd
libsrtp -- DoS via crafted RTP header vulnerability
2015-11-02 00:00:00
mageia
mageia
Updated srtp packages fix security vulnerability
2016-01-29 14:02:50
debian
debian
[SECURITY] [DSA 3539-1] srtp security update
2016-04-02 09:56:22
[SECURITY] [DSA 3539-1] srtp security update
2016-04-02 09:56:22
[SECURITY] [DLA 393-1] srtp security update
2016-01-18 18:30:24
debiancve
debiancve
CVE-2015-6360
2016-04-21 10:59:00
prion
prion
Code injection
2016-04-21 10:59:00
ubuntucve
ubuntucve
CVE-2015-6360
2016-04-21 00:00:00
nvd
nvd
CVE-2015-6360
2016-04-21 10:59:00
amazon
amazon
Medium: libsrtp
2020-10-22 18:18:00
oraclelinux
oraclelinux
libsrtp security and bug fix update
2020-10-06 00:00:00
redhat
redhat
(RHSA-2020:3873) Moderate: libsrtp security and bug fix update
2020-09-29 07:39:26
centos
centos
libsrtp security update
2020-10-20 18:24:00
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
7.8 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:N/I:N/A:C
0.026 Low
EPSS
Percentile
90.3%
Related for CISCO-SA-20160420-LIBSRTP