Lucene search
CiscoCISCO-SA-20160420-LIBSRTPHistoryApr 20, 2016 - 4:00 p.m.
Multiple Cisco Products libSRTP Denial of Service Vulnerability
2016-04-2016:00:00
tools.cisco.com
19
CVSS2
7.8
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:N/I:N/A:C
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
0.026
Percentile
90.3%
Cisco released version 1.5.3 of the Secure Real-Time Transport Protocol (SRTP) library (libSRTP), which addresses a denial of service (DoS) vulnerability. Multiple Cisco products incorporate a vulnerable version of the libSRTP library.
The vulnerability is in the encryption processing subsystem of libSRTP and could allow an unauthenticated, remote attacker to trigger a DoS condition. The vulnerability is due to improper input validation of certain fields of SRTP packets. An attacker could exploit this vulnerability by sending a crafted SRTP packet designed to trigger the issue to an affected device.
The impact of this vulnerability on Cisco products may vary depending on the affected product. Details about the impact on each product are outlined in the “Conditions” section of each Cisco bug for this vulnerability. The bug IDs are listed at the top of this advisory and in the table in “Vulnerable Products.”
This advisory is available at the following link:
Affected configurations
Node
ciscoadaptive_security_appliance_softwareMatch8.2
ORciscoadaptive_security_appliance_softwareMatch8.1
ORciscoadaptive_security_appliance_softwareMatch8.3
ORciscoadaptive_security_appliance_softwareMatch8.4
ORciscoadaptive_security_appliance_softwareMatch8.5
ORciscoadaptive_security_appliance_softwareMatch8.6
ORciscoadaptive_security_appliance_softwareMatch8.7
ORciscoadaptive_security_appliance_softwareMatch9.0
ORciscoadaptive_security_appliance_softwareMatch9.1
ORciscoadaptive_security_appliance_softwareMatch9.2
ORciscoadaptive_security_appliance_softwareMatch9.3
ORciscounified_wireless_ip_phone_7920_firmwareMatchany
ORciscounity_connectionMatchany
ORciscounified_communications_managerMatchany
ORciscocisco_iosMatch3.7sxe
ORciscocisco_iosMatch3.8sxe
ORciscocisco_iosMatch3.9sxe
ORciscocisco_iosMatch3.10sxe
ORciscocisco_iosMatch3.11sxe
ORciscocisco_iosMatch3.12sxe
ORciscocisco_iosMatch3.13sxe
ORciscocisco_iosMatch3.14sxe
ORciscocisco_iosMatch3.15sxe
ORciscocisco_iosMatch3.16sxe
ORciscocisco_iosMatch3.17sxe
ORciscowebex_meeting_centerMatchany
ORciscounified_ip_phone_8900_series_firmwareMatchany
ORciscoip_phone_8800_seriesMatchany
ORciscojabber_software_development_kitMatchany
ORciscodx_series_ip_phones_firmwareMatchany
ORciscoip_phone_7800_series_firmwareMatchany
ORciscounified_ip_phone_7900_series_firmwareMatchany
ORciscounified_ip_phone_6900_series_firmwareMatchany
ORciscoadaptive_security_appliance_softwareMatch8.2.0.45
ORciscoadaptive_security_appliance_softwareMatch8.2.1
ORciscoadaptive_security_appliance_softwareMatch8.2.2
ORciscoadaptive_security_appliance_softwareMatch8.2.2.10
ORciscoadaptive_security_appliance_softwareMatch8.2.3
ORciscoadaptive_security_appliance_softwareMatch8.2.4
ORciscoadaptive_security_appliance_softwareMatch8.2.1.11
ORciscoadaptive_security_appliance_softwareMatch8.2.2.9
ORciscoadaptive_security_appliance_softwareMatch8.2.2.12
ORciscoadaptive_security_appliance_softwareMatch8.2.2.16
ORciscoadaptive_security_appliance_softwareMatch8.2.4.1
ORciscoadaptive_security_appliance_softwareMatch8.2.4.4
ORciscoadaptive_security_appliance_softwareMatch8.2.5
ORciscoadaptive_security_appliance_softwareMatch8.2.5.13
ORciscoadaptive_security_appliance_softwareMatch8.2.5.22
ORciscoadaptive_security_appliance_softwareMatch8.2.5.26
ORciscoadaptive_security_appliance_softwareMatch8.2.2.17
ORciscoadaptive_security_appliance_softwareMatch8.2.5.33
ORciscoadaptive_security_appliance_softwareMatch8.2.5.40
ORciscoadaptive_security_appliance_softwareMatch8.2.5.41
ORciscoadaptive_security_appliance_softwareMatch8.2.5.46
ORciscoadaptive_security_appliance_softwareMatch8.2.5.48
ORciscoadaptive_security_appliance_softwareMatch8.2.5.50
ORciscoadaptive_security_appliance_softwareMatch8.2.5.52
ORciscoadaptive_security_appliance_softwareMatch8.2.5.55
ORciscoadaptive_security_appliance_softwareMatch8.2.5.57
ORciscoadaptive_security_appliance_softwareMatch8.1.0.104
ORciscoadaptive_security_appliance_softwareMatch8.3.1.1
ORciscoadaptive_security_appliance_softwareMatch8.3.1
ORciscoadaptive_security_appliance_softwareMatch8.3.2
ORciscoadaptive_security_appliance_softwareMatch8.3.2.23
ORciscoadaptive_security_appliance_softwareMatch8.3.2.25
ORciscoadaptive_security_appliance_softwareMatch8.3.1.4
ORciscoadaptive_security_appliance_softwareMatch8.3.1.6
ORciscoadaptive_security_appliance_softwareMatch8.3.2.4
ORciscoadaptive_security_appliance_softwareMatch8.3.2.13
ORciscoadaptive_security_appliance_softwareMatch8.3.2.31
ORciscoadaptive_security_appliance_softwareMatch8.3.2.33
ORciscoadaptive_security_appliance_softwareMatch8.3.2.34
ORciscoadaptive_security_appliance_softwareMatch8.3.2.37
ORciscoadaptive_security_appliance_softwareMatch8.3.2.39
ORciscoadaptive_security_appliance_softwareMatch8.3.2.40
ORciscoadaptive_security_appliance_softwareMatch8.3.2.41
ORciscoadaptive_security_appliance_softwareMatch8.3.2.44
ORciscoadaptive_security_appliance_softwareMatch8.4.1
ORciscoadaptive_security_appliance_softwareMatch8.4.2
ORciscoadaptive_security_appliance_softwareMatch8.4.1.3
ORciscoadaptive_security_appliance_softwareMatch8.4.1.11
ORciscoadaptive_security_appliance_softwareMatch8.4.2.8
ORciscoadaptive_security_appliance_softwareMatch8.4.3
ORciscoadaptive_security_appliance_softwareMatch8.4.3.8
ORciscoadaptive_security_appliance_softwareMatch8.4.3.9
ORciscoadaptive_security_appliance_softwareMatch8.4.4
ORciscoadaptive_security_appliance_softwareMatch8.4.4.1
ORciscoadaptive_security_appliance_softwareMatch8.4.4.3
ORciscoadaptive_security_appliance_softwareMatch8.4.4.5
ORciscoadaptive_security_appliance_softwareMatch8.4.4.9
ORciscoadaptive_security_appliance_softwareMatch8.4.5
ORciscoadaptive_security_appliance_softwareMatch8.4.5.6
ORciscoadaptive_security_appliance_softwareMatch8.4.6
ORciscoadaptive_security_appliance_softwareMatch8.4.2.1
ORciscoadaptive_security_appliance_softwareMatch8.4.7
ORciscoadaptive_security_appliance_softwareMatch8.4.7.3
ORciscoadaptive_security_appliance_softwareMatch8.4.7.15
ORciscoadaptive_security_appliance_softwareMatch8.4.7.22
ORciscoadaptive_security_appliance_softwareMatch8.4.7.23
ORciscoadaptive_security_appliance_softwareMatch8.4.7.26
ORciscoadaptive_security_appliance_softwareMatch8.4.7.28
ORciscoadaptive_security_appliance_softwareMatch8.4.7.29
ORciscoadaptive_security_appliance_softwareMatch8.5.1
ORciscoadaptive_security_appliance_softwareMatch8.5.1.1
ORciscoadaptive_security_appliance_softwareMatch8.5.1.6
ORciscoadaptive_security_appliance_softwareMatch8.5.1.7
ORciscoadaptive_security_appliance_softwareMatch8.5.1.14
ORciscoadaptive_security_appliance_softwareMatch8.5.1.17
ORciscoadaptive_security_appliance_softwareMatch8.5.1.18
ORciscoadaptive_security_appliance_softwareMatch8.5.1.19
ORciscoadaptive_security_appliance_softwareMatch8.5.1.21
ORciscoadaptive_security_appliance_softwareMatch8.5.1.24
ORciscoadaptive_security_appliance_softwareMatch8.6.1.1
ORciscoadaptive_security_appliance_softwareMatch8.6.1
ORciscoadaptive_security_appliance_softwareMatch8.6.1.2
ORciscoadaptive_security_appliance_softwareMatch8.6.1.5
ORciscoadaptive_security_appliance_softwareMatch8.6.1.10
ORciscoadaptive_security_appliance_softwareMatch8.6.1.12
ORciscoadaptive_security_appliance_softwareMatch8.6.1.13
ORciscoadaptive_security_appliance_softwareMatch8.6.1.14
ORciscoadaptive_security_appliance_softwareMatch8.6.1.17
ORciscoadaptive_security_appliance_softwareMatch8.7.1
ORciscoadaptive_security_appliance_softwareMatch8.7.1.1
ORciscoadaptive_security_appliance_softwareMatch8.7.1.3
ORciscoadaptive_security_appliance_softwareMatch8.7.1.4
ORciscoadaptive_security_appliance_softwareMatch8.7.1.7
ORciscoadaptive_security_appliance_softwareMatch8.7.1.8
ORciscoadaptive_security_appliance_softwareMatch8.7.1.11
ORciscoadaptive_security_appliance_softwareMatch8.7.1.13
ORciscoadaptive_security_appliance_softwareMatch8.7.1.16
ORciscoadaptive_security_appliance_softwareMatch8.7.1.17
ORciscoadaptive_security_appliance_softwareMatch9.0.1
ORciscoadaptive_security_appliance_softwareMatch9.0.2
ORciscoadaptive_security_appliance_softwareMatch9.0.2.10
ORciscoadaptive_security_appliance_softwareMatch9.0.3
ORciscoadaptive_security_appliance_softwareMatch9.0.3.6
ORciscoadaptive_security_appliance_softwareMatch9.0.3.8
ORciscoadaptive_security_appliance_softwareMatch9.0.4
ORciscoadaptive_security_appliance_softwareMatch9.0.4.1
ORciscoadaptive_security_appliance_softwareMatch9.0.4.5
ORciscoadaptive_security_appliance_softwareMatch9.0.4.17
ORciscoadaptive_security_appliance_softwareMatch9.0.4.20
ORciscoadaptive_security_appliance_softwareMatch9.0.4.24
ORciscoadaptive_security_appliance_softwareMatch9.0.4.7
ORciscoadaptive_security_appliance_softwareMatch9.0.4.26
ORciscoadaptive_security_appliance_softwareMatch9.0.4.29
ORciscoadaptive_security_appliance_softwareMatch9.0.4.33
ORciscoadaptive_security_appliance_softwareMatch9.0.4.37
ORciscoadaptive_security_appliance_softwareMatch9.0.4.35
ORciscoadaptive_security_appliance_softwareMatch9.1.1
ORciscoadaptive_security_appliance_softwareMatch9.1.1.4
ORciscoadaptive_security_appliance_softwareMatch9.1.2
ORciscoadaptive_security_appliance_softwareMatch9.1.3
ORciscoadaptive_security_appliance_softwareMatch9.1.2.8
ORciscoadaptive_security_appliance_softwareMatch9.1.3.2
ORciscoadaptive_security_appliance_softwareMatch9.1.4
ORciscoadaptive_security_appliance_softwareMatch9.1.4.5
ORciscoadaptive_security_appliance_softwareMatch9.1.5
ORciscoadaptive_security_appliance_softwareMatch9.1.5.10
ORciscoadaptive_security_appliance_softwareMatch9.1.5.12
ORciscoadaptive_security_appliance_softwareMatch9.1.5.15
ORciscoadaptive_security_appliance_softwareMatch9.1.6
ORciscoadaptive_security_appliance_softwareMatch9.1.5.21
ORciscoadaptive_security_appliance_softwareMatch9.1.6.1
ORciscoadaptive_security_appliance_softwareMatch9.1.6.6
ORciscoadaptive_security_appliance_softwareMatch9.1.6.4
ORciscoadaptive_security_appliance_softwareMatch9.1.6.8
ORciscoadaptive_security_appliance_softwareMatch9.1.6.10
ORciscoadaptive_security_appliance_softwareMatch9.2.1
ORciscoadaptive_security_appliance_softwareMatch9.2.2
ORciscoadaptive_security_appliance_softwareMatch9.2.2.4
ORciscoadaptive_security_appliance_softwareMatch9.2.2.7
ORciscoadaptive_security_appliance_softwareMatch9.2.3
ORciscoadaptive_security_appliance_softwareMatch9.2.2.8
ORciscoadaptive_security_appliance_softwareMatch9.2.3.3
ORciscoadaptive_security_appliance_softwareMatch9.2.3.4
ORciscoadaptive_security_appliance_softwareMatch9.2.0.0
ORciscoadaptive_security_appliance_softwareMatch9.2.0.104
ORciscoadaptive_security_appliance_softwareMatch9.2.3.1
ORciscoadaptive_security_appliance_softwareMatch9.2.4
ORciscoadaptive_security_appliance_softwareMatch9.3.1
ORciscoadaptive_security_appliance_softwareMatch9.3.1.1
ORciscoadaptive_security_appliance_softwareMatch9.3.2
ORciscoadaptive_security_appliance_softwareMatch9.3.2.2
ORciscoadaptive_security_appliance_softwareMatch9.3.3
ORciscoadaptive_security_appliance_softwareMatch9.3.5
ORciscoadaptive_security_appliance_softwareMatch9.3.3.1
ORciscoadaptive_security_appliance_softwareMatch9.3.3.2
ORciscoadaptive_security_appliance_softwareMatch9.3.3.5
ORciscounified_ip_phoneMatch7920
ORciscounity_connectionMatchany
ORciscounified_communications_managerMatchany
ORciscocisco_iosMatch3.7.0sxe
ORciscocisco_iosMatch3.7.1sxe
ORciscocisco_iosMatch3.7.2sxe
ORciscocisco_iosMatch3.7.3sxe
ORciscocisco_iosMatch3.7.4sxe
ORciscocisco_iosMatch3.7.5sxe
ORciscocisco_iosMatch3.7.6sxe
ORciscocisco_iosMatch3.7.7sxe
ORciscocisco_iosMatch3.7.8sxe
ORciscocisco_iosMatch3.7.4asxe
ORciscocisco_iosMatch3.7.2tsxe
ORciscocisco_iosMatch3.7.0bsxe
ORciscocisco_iosMatch3.7.1asxe
ORciscocisco_iosMatch3.8.0sxe
ORciscocisco_iosMatch3.8.1sxe
ORciscocisco_iosMatch3.8.2sxe
ORciscocisco_iosMatch3.9.1sxe
ORciscocisco_iosMatch3.9.0sxe
ORciscocisco_iosMatch3.9.2sxe
ORciscocisco_iosMatch3.9.1asxe
ORciscocisco_iosMatch3.9.0asxe
ORciscocisco_iosMatch3.10.0sxe
ORciscocisco_iosMatch3.10.1sxe
ORciscocisco_iosMatch3.10.2sxe
ORciscocisco_iosMatch3.10.3sxe
ORciscocisco_iosMatch3.10.4sxe
ORciscocisco_iosMatch3.10.5sxe
ORciscocisco_iosMatch3.10.6sxe
ORciscocisco_iosMatch3.10.2asxe
ORciscocisco_iosMatch3.10.2tsxe
ORciscocisco_iosMatch3.11.1sxe
ORciscocisco_iosMatch3.11.2sxe
ORciscocisco_iosMatch3.11.0sxe
ORciscocisco_iosMatch3.11.3sxe
ORciscocisco_iosMatch3.11.4sxe
ORciscocisco_iosMatch3.12.0sxe
ORciscocisco_iosMatch3.12.1sxe
ORciscocisco_iosMatch3.12.2sxe
ORciscocisco_iosMatch3.12.3sxe
ORciscocisco_iosMatch3.12.0asxe
ORciscocisco_iosMatch3.12.4sxe
ORciscocisco_iosMatch3.13.0sxe
ORciscocisco_iosMatch3.13.1sxe
ORciscocisco_iosMatch3.13.2sxe
ORciscocisco_iosMatch3.13.3sxe
ORciscocisco_iosMatch3.13.4sxe
ORciscocisco_iosMatch3.13.2asxe
ORciscocisco_iosMatch3.13.0asxe
ORciscocisco_iosMatch3.14.0sxe
ORciscocisco_iosMatch3.14.1sxe
ORciscocisco_iosMatch3.14.2sxe
ORciscocisco_iosMatch3.15.0sxe
ORciscocisco_iosMatch3.15.1sxe
ORciscocisco_iosMatch3.15.2sxe
ORciscocisco_iosMatch3.15.1csxe
ORciscocisco_iosMatch3.16.0sxe
ORciscocisco_iosMatch3.16.1sxe
ORciscocisco_iosMatch3.16.0asxe
ORciscocisco_iosMatch3.16.1asxe
ORciscocisco_iosMatch3.16.0bsxe
ORciscocisco_iosMatch3.16.0csxe
ORciscocisco_iosMatch3.17.0sxe
ORciscowebex_meeting_centerMatchany
ORciscounified_ip_phoneMatch8900_series
ORciscoip_phone_7960Match8800_series_software
ORciscojabber_software_development_kitMatchany
ORciscodx_series_ip_phones_firmwareMatchany
ORciscoip_phone_7960Match7800_series
ORciscounified_ip_phoneMatch7900_series
ORciscounified_ip_phoneMatch6900_series
| Vendor | Product | Version | CPE |
|---|---|---|---|
| cisco | adaptive_security_appliance_software | 8.2 | cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2:*:*:*:*:*:*:* |
| cisco | adaptive_security_appliance_software | 8.1 | cpe:2.3:o:cisco:adaptive_security_appliance_software:8.1:*:*:*:*:*:*:* |
| cisco | adaptive_security_appliance_software | 8.3 | cpe:2.3:o:cisco:adaptive_security_appliance_software:8.3:*:*:*:*:*:*:* |
| cisco | adaptive_security_appliance_software | 8.4 | cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4:*:*:*:*:*:*:* |
| cisco | adaptive_security_appliance_software | 8.5 | cpe:2.3:o:cisco:adaptive_security_appliance_software:8.5:*:*:*:*:*:*:* |
| cisco | adaptive_security_appliance_software | 8.6 | cpe:2.3:o:cisco:adaptive_security_appliance_software:8.6:*:*:*:*:*:*:* |
| cisco | adaptive_security_appliance_software | 8.7 | cpe:2.3:o:cisco:adaptive_security_appliance_software:8.7:*:*:*:*:*:*:* |
| cisco | adaptive_security_appliance_software | 9.0 | cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0:*:*:*:*:*:*:* |
| cisco | adaptive_security_appliance_software | 9.1 | cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1:*:*:*:*:*:*:* |
| cisco | adaptive_security_appliance_software | 9.2 | cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2:*:*:*:*:*:*:* |
Related
openvas
openvas
Debian: Security Advisory (DLA-393-1)
2023-03-08 00:00:00
Mageia: Security Advisory (MGASA-2016-0037)
2016-02-02 00:00:00
Debian Security Advisory DSA 3539-1 (srtp - security update)
2016-04-02 00:00:00
nessus
nessus
Debian DLA-393-1 : srtp security update
2016-01-19 00:00:00
Cisco IOS XE libsrtp DoS (CSCux04317)
2016-06-22 00:00:00
openSUSE Security Update : libsrtp (openSUSE-2016-1063)
2016-09-09 00:00:00
cvelist
cvelist
CVE-2015-6360
2016-04-21 10:00:00
cve
cve
CVE-2015-6360
2016-04-21 10:59:00
freebsd
freebsd
libsrtp -- DoS via crafted RTP header vulnerability
2015-11-02 00:00:00
debiancve
debiancve
CVE-2015-6360
2016-04-21 10:59:00
prion
prion
Code injection
2016-04-21 10:59:00
ubuntucve
ubuntucve
CVE-2015-6360
2016-04-21 00:00:00
debian
debian
[SECURITY] [DSA 3539-1] srtp security update
2016-04-02 09:56:22
[SECURITY] [DLA 393-1] srtp security update
2016-01-18 18:26:25
[SECURITY] [DSA 3539-1] srtp security update
2016-04-02 09:56:22
nvd
nvd
CVE-2015-6360
2016-04-21 10:59:00
mageia
mageia
Updated srtp packages fix security vulnerability
2016-01-29 14:02:50
amazon
amazon
Medium: libsrtp
2020-10-22 18:18:00
centos
centos
libsrtp security update
2020-10-20 18:24:00
oraclelinux
oraclelinux
libsrtp security and bug fix update
2020-10-06 00:00:00
redhat
redhat
(RHSA-2020:3873) Moderate: libsrtp security and bug fix update
2020-09-29 07:39:26
CVSS2
7.8
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:N/I:N/A:C
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
0.026
Percentile
90.3%
Related for CISCO-SA-20160420-LIBSRTP