Lucene search
CiscoCISCO-SA-20160420-LIBSRTPHistoryApr 20, 2016 - 4:00 p.m.
Multiple Cisco Products libSRTP Denial of Service Vulnerability
2016-04-2016:00:00
tools.cisco.com
15
7.8 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:N/I:N/A:C
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
0.026 Low
EPSS
Percentile
90.3%
Cisco released version 1.5.3 of the Secure Real-Time Transport Protocol (SRTP) library (libSRTP), which addresses a denial of service (DoS) vulnerability. Multiple Cisco products incorporate a vulnerable version of the libSRTP library.
The vulnerability is in the encryption processing subsystem of libSRTP and could allow an unauthenticated, remote attacker to trigger a DoS condition. The vulnerability is due to improper input validation of certain fields of SRTP packets. An attacker could exploit this vulnerability by sending a crafted SRTP packet designed to trigger the issue to an affected device.
The impact of this vulnerability on Cisco products may vary depending on the affected product. Details about the impact on each product are outlined in the “Conditions” section of each Cisco bug for this vulnerability. The bug IDs are listed at the top of this advisory and in the table in “Vulnerable Products.”
This advisory is available at the following link:
Affected configurations
Node
ciscoadaptive_security_virtual_applianceMatch8.2
ORciscoadaptive_security_virtual_applianceMatch8.1
ORciscoadaptive_security_virtual_applianceMatch8.3
ORciscoadaptive_security_virtual_applianceMatch8.4
ORciscoadaptive_security_virtual_applianceMatch8.5
ORciscoadaptive_security_virtual_applianceMatch8.6
ORciscoadaptive_security_virtual_applianceMatch8.7
ORciscoadaptive_security_virtual_applianceMatch9.0
ORciscoadaptive_security_virtual_applianceMatch9.1
ORciscoadaptive_security_virtual_applianceMatch9.2
ORciscoadaptive_security_virtual_applianceMatch9.3
ORciscounified_ip_ivrMatchany
ORciscounity_connectionMatchany
ORciscounified_communications_managerMatchany
ORciscorvs4000_softwareMatch3.7s
ORciscorvs4000_softwareMatch3.8s
ORciscorvs4000_softwareMatch3.9s
ORciscorvs4000_softwareMatch3.10s
ORciscorvs4000_softwareMatch3.11s
ORciscorvs4000_softwareMatch3.12s
ORciscorvs4000_softwareMatch3.13s
ORciscorvs4000_softwareMatch3.14s
ORciscorvs4000_softwareMatch3.15s
ORciscorvs4000_softwareMatch3.16s
ORciscorvs4000_softwareMatch3.17s
ORciscowebex_meeting_centerMatchany
ORciscoip_phone_8800_seriesMatchany
ORciscoip_phone_8800_seriesMatchany
ORciscojabber_software_development_kitMatchany
ORciscoip_phone_8800_seriesMatchany
ORciscoip_phone_8800_seriesMatchany
ORciscoip_phone_8800_seriesMatchany
ORciscoip_phone_8800_seriesMatchany
ORciscoadaptive_security_virtual_applianceMatch8.2.0.45
ORciscoadaptive_security_virtual_applianceMatch8.2.1
ORciscoadaptive_security_virtual_applianceMatch8.2.2
ORciscoadaptive_security_virtual_applianceMatch8.2.2.10
ORciscoadaptive_security_virtual_applianceMatch8.2.3
ORciscoadaptive_security_virtual_applianceMatch8.2.4
ORciscoadaptive_security_virtual_applianceMatch8.2.1.11
ORciscoadaptive_security_virtual_applianceMatch8.2.2.9
ORciscoadaptive_security_virtual_applianceMatch8.2.2.12
ORciscoadaptive_security_virtual_applianceMatch8.2.2.16
ORciscoadaptive_security_virtual_applianceMatch8.2.4.1
ORciscoadaptive_security_virtual_applianceMatch8.2.4.4
ORciscoadaptive_security_virtual_applianceMatch8.2.5
ORciscoadaptive_security_virtual_applianceMatch8.2.5.13
ORciscoadaptive_security_virtual_applianceMatch8.2.5.22
ORciscoadaptive_security_virtual_applianceMatch8.2.5.26
ORciscoadaptive_security_virtual_applianceMatch8.2.2.17
ORciscoadaptive_security_virtual_applianceMatch8.2.5.33
ORciscoadaptive_security_virtual_applianceMatch8.2.5.40
ORciscoadaptive_security_virtual_applianceMatch8.2.5.41
ORciscoadaptive_security_virtual_applianceMatch8.2.5.46
ORciscoadaptive_security_virtual_applianceMatch8.2.5.48
ORciscoadaptive_security_virtual_applianceMatch8.2.5.50
ORciscoadaptive_security_virtual_applianceMatch8.2.5.52
ORciscoadaptive_security_virtual_applianceMatch8.2.5.55
ORciscoadaptive_security_virtual_applianceMatch8.2.5.57
ORciscoadaptive_security_virtual_applianceMatch8.1.0.104
ORciscoadaptive_security_virtual_applianceMatch8.3.1.1
ORciscoadaptive_security_virtual_applianceMatch8.3.1
ORciscoadaptive_security_virtual_applianceMatch8.3.2
ORciscoadaptive_security_virtual_applianceMatch8.3.2.23
ORciscoadaptive_security_virtual_applianceMatch8.3.2.25
ORciscoadaptive_security_virtual_applianceMatch8.3.1.4
ORciscoadaptive_security_virtual_applianceMatch8.3.1.6
ORciscoadaptive_security_virtual_applianceMatch8.3.2.4
ORciscoadaptive_security_virtual_applianceMatch8.3.2.13
ORciscoadaptive_security_virtual_applianceMatch8.3.2.31
ORciscoadaptive_security_virtual_applianceMatch8.3.2.33
ORciscoadaptive_security_virtual_applianceMatch8.3.2.34
ORciscoadaptive_security_virtual_applianceMatch8.3.2.37
ORciscoadaptive_security_virtual_applianceMatch8.3.2.39
ORciscoadaptive_security_virtual_applianceMatch8.3.2.40
ORciscoadaptive_security_virtual_applianceMatch8.3.2.41
ORciscoadaptive_security_virtual_applianceMatch8.3.2.44
ORciscoadaptive_security_virtual_applianceMatch8.4.1
ORciscoadaptive_security_virtual_applianceMatch8.4.2
ORciscoadaptive_security_virtual_applianceMatch8.4.1.3
ORciscoadaptive_security_virtual_applianceMatch8.4.1.11
ORciscoadaptive_security_virtual_applianceMatch8.4.2.8
ORciscoadaptive_security_virtual_applianceMatch8.4.3
ORciscoadaptive_security_virtual_applianceMatch8.4.3.8
ORciscoadaptive_security_virtual_applianceMatch8.4.3.9
ORciscoadaptive_security_virtual_applianceMatch8.4.4
ORciscoadaptive_security_virtual_applianceMatch8.4.4.1
ORciscoadaptive_security_virtual_applianceMatch8.4.4.3
ORciscoadaptive_security_virtual_applianceMatch8.4.4.5
ORciscoadaptive_security_virtual_applianceMatch8.4.4.9
ORciscoadaptive_security_virtual_applianceMatch8.4.5
ORciscoadaptive_security_virtual_applianceMatch8.4.5.6
ORciscoadaptive_security_virtual_applianceMatch8.4.6
ORciscoadaptive_security_virtual_applianceMatch8.4.2.1
ORciscoadaptive_security_virtual_applianceMatch8.4.7
ORciscoadaptive_security_virtual_applianceMatch8.4.7.3
ORciscoadaptive_security_virtual_applianceMatch8.4.7.15
ORciscoadaptive_security_virtual_applianceMatch8.4.7.22
ORciscoadaptive_security_virtual_applianceMatch8.4.7.23
ORciscoadaptive_security_virtual_applianceMatch8.4.7.26
ORciscoadaptive_security_virtual_applianceMatch8.4.7.28
ORciscoadaptive_security_virtual_applianceMatch8.4.7.29
ORciscoadaptive_security_virtual_applianceMatch8.5.1
ORciscoadaptive_security_virtual_applianceMatch8.5.1.1
ORciscoadaptive_security_virtual_applianceMatch8.5.1.6
ORciscoadaptive_security_virtual_applianceMatch8.5.1.7
ORciscoadaptive_security_virtual_applianceMatch8.5.1.14
ORciscoadaptive_security_virtual_applianceMatch8.5.1.17
ORciscoadaptive_security_virtual_applianceMatch8.5.1.18
ORciscoadaptive_security_virtual_applianceMatch8.5.1.19
ORciscoadaptive_security_virtual_applianceMatch8.5.1.21
ORciscoadaptive_security_virtual_applianceMatch8.5.1.24
ORciscoadaptive_security_virtual_applianceMatch8.6.1.1
ORciscoadaptive_security_virtual_applianceMatch8.6.1
ORciscoadaptive_security_virtual_applianceMatch8.6.1.2
ORciscoadaptive_security_virtual_applianceMatch8.6.1.5
ORciscoadaptive_security_virtual_applianceMatch8.6.1.10
ORciscoadaptive_security_virtual_applianceMatch8.6.1.12
ORciscoadaptive_security_virtual_applianceMatch8.6.1.13
ORciscoadaptive_security_virtual_applianceMatch8.6.1.14
ORciscoadaptive_security_virtual_applianceMatch8.6.1.17
ORciscoadaptive_security_virtual_applianceMatch8.7.1
ORciscoadaptive_security_virtual_applianceMatch8.7.1.1
ORciscoadaptive_security_virtual_applianceMatch8.7.1.3
ORciscoadaptive_security_virtual_applianceMatch8.7.1.4
ORciscoadaptive_security_virtual_applianceMatch8.7.1.7
ORciscoadaptive_security_virtual_applianceMatch8.7.1.8
ORciscoadaptive_security_virtual_applianceMatch8.7.1.11
ORciscoadaptive_security_virtual_applianceMatch8.7.1.13
ORciscoadaptive_security_virtual_applianceMatch8.7.1.16
ORciscoadaptive_security_virtual_applianceMatch8.7.1.17
ORciscoadaptive_security_virtual_applianceMatch9.0.1
ORciscoadaptive_security_virtual_applianceMatch9.0.2
ORciscoadaptive_security_virtual_applianceMatch9.0.2.10
ORciscoadaptive_security_virtual_applianceMatch9.0.3
ORciscoadaptive_security_virtual_applianceMatch9.0.3.6
ORciscoadaptive_security_virtual_applianceMatch9.0.3.8
ORciscoadaptive_security_virtual_applianceMatch9.0.4
ORciscoadaptive_security_virtual_applianceMatch9.0.4.1
ORciscoadaptive_security_virtual_applianceMatch9.0.4.5
ORciscoadaptive_security_virtual_applianceMatch9.0.4.17
ORciscoadaptive_security_virtual_applianceMatch9.0.4.20
ORciscoadaptive_security_virtual_applianceMatch9.0.4.24
ORciscoadaptive_security_virtual_applianceMatch9.0.4.7
ORciscoadaptive_security_virtual_applianceMatch9.0.4.26
ORciscoadaptive_security_virtual_applianceMatch9.0.4.29
ORciscoadaptive_security_virtual_applianceMatch9.0.4.33
ORciscoadaptive_security_virtual_applianceMatch9.0.4.37
ORciscoadaptive_security_virtual_applianceMatch9.0.4.35
ORciscoadaptive_security_virtual_applianceMatch9.1.1
ORciscoadaptive_security_virtual_applianceMatch9.1.1.4
ORciscoadaptive_security_virtual_applianceMatch9.1.2
ORciscoadaptive_security_virtual_applianceMatch9.1.3
ORciscoadaptive_security_virtual_applianceMatch9.1.2.8
ORciscoadaptive_security_virtual_applianceMatch9.1.3.2
ORciscoadaptive_security_virtual_applianceMatch9.1.4
ORciscoadaptive_security_virtual_applianceMatch9.1.4.5
ORciscoadaptive_security_virtual_applianceMatch9.1.5
ORciscoadaptive_security_virtual_applianceMatch9.1.5.10
ORciscoadaptive_security_virtual_applianceMatch9.1.5.12
ORciscoadaptive_security_virtual_applianceMatch9.1.5.15
ORciscoadaptive_security_virtual_applianceMatch9.1.6
ORciscoadaptive_security_virtual_applianceMatch9.1.5.21
ORciscoadaptive_security_virtual_applianceMatch9.1.6.1
ORciscoadaptive_security_virtual_applianceMatch9.1.6.6
ORciscoadaptive_security_virtual_applianceMatch9.1.6.4
ORciscoadaptive_security_virtual_applianceMatch9.1.6.8
ORciscoadaptive_security_virtual_applianceMatch9.1.6.10
ORciscoadaptive_security_virtual_applianceMatch9.2.1
ORciscoadaptive_security_virtual_applianceMatch9.2.2
ORciscoadaptive_security_virtual_applianceMatch9.2.2.4
ORciscoadaptive_security_virtual_applianceMatch9.2.2.7
ORciscoadaptive_security_virtual_applianceMatch9.2.3
ORciscoadaptive_security_virtual_applianceMatch9.2.2.8
ORciscoadaptive_security_virtual_applianceMatch9.2.3.3
ORciscoadaptive_security_virtual_applianceMatch9.2.3.4
ORciscoadaptive_security_virtual_applianceMatch9.2.0.0
ORciscoadaptive_security_virtual_applianceMatch9.2.0.104
ORciscoadaptive_security_virtual_applianceMatch9.2.3.1
ORciscoadaptive_security_virtual_applianceMatch9.2.4
ORciscoadaptive_security_virtual_applianceMatch9.3.1
ORciscoadaptive_security_virtual_applianceMatch9.3.1.1
ORciscoadaptive_security_virtual_applianceMatch9.3.2
ORciscoadaptive_security_virtual_applianceMatch9.3.2.2
ORciscoadaptive_security_virtual_applianceMatch9.3.3
ORciscoadaptive_security_virtual_applianceMatch9.3.5
ORciscoadaptive_security_virtual_applianceMatch9.3.3.1
ORciscoadaptive_security_virtual_applianceMatch9.3.3.2
ORciscoadaptive_security_virtual_applianceMatch9.3.3.5
ORciscounified_ip_ivrMatch7920
ORciscounity_connectionMatchany
ORciscounified_communications_managerMatchany
ORciscorvs4000_softwareMatch3.7.0s
ORciscorvs4000_softwareMatch3.7.1s
ORciscorvs4000_softwareMatch3.7.2s
ORciscorvs4000_softwareMatch3.7.3s
ORciscorvs4000_softwareMatch3.7.4s
ORciscorvs4000_softwareMatch3.7.5s
ORciscorvs4000_softwareMatch3.7.6s
ORciscorvs4000_softwareMatch3.7.7s
ORciscorvs4000_softwareMatch3.7.8s
ORciscorvs4000_softwareMatch3.7.4as
ORciscorvs4000_softwareMatch3.7.2ts
ORciscorvs4000_softwareMatch3.7.0bs
ORciscorvs4000_softwareMatch3.7.1as
ORciscorvs4000_softwareMatch3.8.0s
ORciscorvs4000_softwareMatch3.8.1s
ORciscorvs4000_softwareMatch3.8.2s
ORciscorvs4000_softwareMatch3.9.1s
ORciscorvs4000_softwareMatch3.9.0s
ORciscorvs4000_softwareMatch3.9.2s
ORciscorvs4000_softwareMatch3.9.1as
ORciscorvs4000_softwareMatch3.9.0as
ORciscorvs4000_softwareMatch3.10.0s
ORciscorvs4000_softwareMatch3.10.1s
ORciscorvs4000_softwareMatch3.10.2s
ORciscorvs4000_softwareMatch3.10.3s
ORciscorvs4000_softwareMatch3.10.4s
ORciscorvs4000_softwareMatch3.10.5s
ORciscorvs4000_softwareMatch3.10.6s
ORciscorvs4000_softwareMatch3.10.2as
ORciscorvs4000_softwareMatch3.10.2ts
ORciscorvs4000_softwareMatch3.11.1s
ORciscorvs4000_softwareMatch3.11.2s
ORciscorvs4000_softwareMatch3.11.0s
ORciscorvs4000_softwareMatch3.11.3s
ORciscorvs4000_softwareMatch3.11.4s
ORciscorvs4000_softwareMatch3.12.0s
ORciscorvs4000_softwareMatch3.12.1s
ORciscorvs4000_softwareMatch3.12.2s
ORciscorvs4000_softwareMatch3.12.3s
ORciscorvs4000_softwareMatch3.12.0as
ORciscorvs4000_softwareMatch3.12.4s
ORciscorvs4000_softwareMatch3.13.0s
ORciscorvs4000_softwareMatch3.13.1s
ORciscorvs4000_softwareMatch3.13.2s
ORciscorvs4000_softwareMatch3.13.3s
ORciscorvs4000_softwareMatch3.13.4s
ORciscorvs4000_softwareMatch3.13.2as
ORciscorvs4000_softwareMatch3.13.0as
ORciscorvs4000_softwareMatch3.14.0s
ORciscorvs4000_softwareMatch3.14.1s
ORciscorvs4000_softwareMatch3.14.2s
ORciscorvs4000_softwareMatch3.15.0s
ORciscorvs4000_softwareMatch3.15.1s
ORciscorvs4000_softwareMatch3.15.2s
ORciscorvs4000_softwareMatch3.15.1cs
ORciscorvs4000_softwareMatch3.16.0s
ORciscorvs4000_softwareMatch3.16.1s
ORciscorvs4000_softwareMatch3.16.0as
ORciscorvs4000_softwareMatch3.16.1as
ORciscorvs4000_softwareMatch3.16.0bs
ORciscorvs4000_softwareMatch3.16.0cs
ORciscorvs4000_softwareMatch3.17.0s
ORciscowebex_meeting_centerMatchany
ORciscounified_ip_phoneMatch8900_series
ORciscoip_phone_8800_seriesMatch8800_series_software
ORciscojabber_software_development_kitMatchany
ORciscoip_phone_8800_seriesMatchany
ORciscoip_phone_8800_seriesMatch7800_series
ORciscounified_ip_phoneMatch7900_series
ORciscounified_ip_phoneMatch6900_series
Related
openvas
openvas
Debian: Security Advisory (DLA-393-1)
2023-03-08 00:00:00
Multiple Cisco Products libSRTP Denial of Service Vulnerability
2016-05-09 00:00:00
nessus
nessus
Debian DLA-393-1 : srtp security update
2016-01-19 00:00:00
Debian DSA-3539-1 : srtp - security update
2016-04-05 00:00:00
Cisco ASA libsrtp DoS (CSCux00686)
2016-06-22 00:00:00
cve
cve
CVE-2015-6360
2016-04-21 10:59:00
cvelist
cvelist
CVE-2015-6360
2016-04-21 10:00:00
debian
debian
[SECURITY] [DSA 3539-1] srtp security update
2016-04-02 09:56:22
[SECURITY] [DSA 3539-1] srtp security update
2016-04-02 09:56:22
[SECURITY] [DLA 393-1] srtp security update
2016-01-18 18:26:25
mageia
mageia
Updated srtp packages fix security vulnerability
2016-01-29 14:02:50
freebsd
freebsd
libsrtp -- DoS via crafted RTP header vulnerability
2015-11-02 00:00:00
ubuntucve
ubuntucve
CVE-2015-6360
2016-04-21 00:00:00
debiancve
debiancve
CVE-2015-6360
2016-04-21 10:59:00
prion
prion
Code injection
2016-04-21 10:59:00
nvd
nvd
CVE-2015-6360
2016-04-21 10:59:00
oraclelinux
oraclelinux
libsrtp security and bug fix update
2020-10-06 00:00:00
redhat
redhat
(RHSA-2020:3873) Moderate: libsrtp security and bug fix update
2020-09-29 07:39:26
amazon
amazon
Medium: libsrtp
2020-10-22 18:18:00
centos
centos
libsrtp security update
2020-10-20 18:24:00
7.8 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:N/I:N/A:C
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
0.026 Low
EPSS
Percentile
90.3%
Related for CISCO-SA-20160420-LIBSRTP