7.5
CVSSv3

CVE-2015-6360

Published: 21/04/2016 Updated: 15/08/2023
CVSS v2 Base Score: 7.8 | Impact Score: 6.9 | Exploitability Score: 10
CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9
VMScore: 694
Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C

Vulnerability Summary

The encryption-processing feature in Cisco libSRTP prior to 1.5.3 allows remote malicious users to cause a denial of service via crafted fields in SRTP packets, aka Bug ID CSCux00686.

Vulnerable Product Search on Vulmon Subscribe to Product

cisco ios xe 3.10s_3.10.2ts

cisco ios xe 3.14s_3.14.0s

cisco ios xe 3.10s_3.10.2s

cisco ios xe 3.15s_3.15.2s

cisco ios xe 3.15s_3.15.1s

cisco ios xe 3.10s_3.10.1xbs

cisco ios xe 3.10s_3.10.1s

cisco ios xe 3.10s_3.10.0s

cisco ios xe 3.10s_3.10.6s

cisco ios xe 3.11s_3.11.3s

cisco ios xe 3.11s_3.11.2s

cisco ios xe 3.13s_3.13.4s

cisco ios xe 3.11s_3.11.1s

cisco ios xe 3.11s_3.11.4s

cisco ios xe 3.10s_3.10.5s

cisco ios xe 3.10s_3.10.7s

cisco ios xe 3.13s_3.13.1s

cisco ios xe 3.13s_3.13.0s

cisco ios xe 3.10s_3.10.4s

cisco ios xe 3.11s_3.11.0s

cisco webex meeting center base

cisco unified ip phone 8900 series firmware 9.0\\(3\\)

cisco unified ip phone 8900 series firmware 9.2\\(4\\)

cisco ip phone 8800 series firmware 11.0\\(1\\)

cisco unified ip phone 8900 series firmware 9.0\\(4\\)

cisco unified ip phone 7900 series firmware 9.9\\(9.99001.1\\)

cisco ip phone 7800 series firmware 10.3\\(1\\)

cisco unified wireless ip phone 7920 firmware 1.0_base

cisco unified ip phone 8900 series firmware 9.4\\(1\\)

cisco unified ip phone 8900 series firmware 9.3\\(1\\)

cisco unified ip phone 8900 series firmware 9.0\\(1\\)sr1

cisco unified ip phone 6900 series firmware 9.3\\(2\\)

cisco unified wireless ip phone 7920 firmware 1.0\\(7\\)

cisco unified ip phone 8900 series firmware 9.3\\(4\\)

cisco unified wireless ip phone 7920 firmware 2.0_base

cisco unified wireless ip phone 7920 firmware 1.0\\(6\\)

cisco unified ip phone 8900 series firmware 9.2\\(2\\)sr1

cisco unified ip phone 8900 series firmware 9.4\\(2\\)

cisco unified ip phone 8900 series firmware 9.4\\(1\\)sr1

cisco unified ip phone 8900 series firmware 9.3\\(2\\)sr1

cisco dx series ip phones firmware 9.3\\(2\\)

cisco unified ip phone 8900 series firmware 9.1\\(1\\)sr1

cisco unified ip phone 8900 series firmware 9.1\\(2\\)

cisco unified ip phone 8900 series firmware 9.3\\(2\\)

cisco unified ip phone 8900 series firmware 9.2\\(1\\)

cisco ip phone 8800 series firmware 10.3\\(2\\)

cisco unified wireless ip phone 7920 firmware 1.0\\(8\\)

cisco unified wireless ip phone 7920 firmware 1.0\\(9\\)

cisco unified ip phone 8900 series firmware 9.2\\(3\\)

cisco unified wireless ip phone 7920 firmware 1.0\\(5\\)

cisco unified ip phone 8900 series firmware 9.2\\(2\\)

cisco unified ip phone 7900 series firmware 9.9_base

cisco adaptive security appliance software 9.3.2

cisco adaptive security appliance software 9.1.1.4

cisco adaptive security appliance software 9.1.4

cisco adaptive security appliance software 8.6.1.12

cisco adaptive security appliance software 9.2.2.7

cisco adaptive security appliance software 9.1.5.21

cisco adaptive security appliance software 9.1.3

cisco adaptive security appliance software 9.1.2

cisco adaptive security appliance software 9.2.3

cisco adaptive security appliance software 9.3.1.1

cisco adaptive security appliance software 9.1.1

cisco adaptive security appliance software 9.2.2.8

cisco adaptive security appliance software 9.3.1

cisco adaptive security appliance software 9.1.2.8

cisco adaptive security appliance software 9.1.5.15

cisco adaptive security appliance software 9.1.5.10

cisco adaptive security appliance software 9.2.1

cisco adaptive security appliance software 9.3.2.2

cisco adaptive security appliance software 9.1.5

cisco adaptive security appliance software 9.2.2.4

cisco adaptive security appliance software 9.1.5.12

cisco adaptive security appliance software 9.1.3.2

cisco adaptive security appliance software 9.1.4.5

cisco adaptive security appliance software 9.2.2

cisco adaptive security appliance software 9.3.3.2

cisco adaptive security appliance software 9.1.6.6

cisco adaptive security appliance software 9.1.6.1

cisco adaptive security appliance software 9.2\\(3.1\\)

cisco adaptive security appliance software 9.3\\(2.100\\)

cisco adaptive security appliance software 9.2\\(0.104\\)

cisco adaptive security appliance software 9.2\\(0.0\\)

cisco adaptive security appliance software 9.3\\(1.105\\)

cisco adaptive security appliance software 9.1.6

cisco adaptive security appliance software 9.3.3

cisco adaptive security appliance software 9.1.6.10

cisco adaptive security appliance software 9.3.3.5

cisco adaptive security appliance software 9.2.4

cisco adaptive security appliance software 9.1.6.4

cisco adaptive security appliance software 9.2.3.3

cisco adaptive security appliance software 9.2.3.4

cisco adaptive security appliance software 9.3.3.1

cisco adaptive security appliance software 9.1.6.8

cisco adaptive security appliance software 9.3\\(2.243\\)

cisco adaptive security appliance software 9.3.5

cisco adaptive security appliance software 9.3\\(1.50\\)

cisco adaptive security appliance software 8.3.2.40

cisco adaptive security appliance software 8.3.1

cisco adaptive security appliance software 8.2.2

cisco adaptive security appliance software 8.3.1.1

cisco adaptive security appliance software 8.3.1.6

cisco adaptive security appliance software 8.2.5.40

cisco adaptive security appliance software 8.2.1

cisco adaptive security appliance software 8.2.2.12

cisco adaptive security appliance software 8.2.5.22

cisco adaptive security appliance software 8.2.5.33

cisco adaptive security appliance software 8.2.5.41

cisco adaptive security appliance software 8.2.4.4

cisco adaptive security appliance software 8.2.2.10

cisco adaptive security appliance software 8.3.2.37

cisco adaptive security appliance software 8.3.2.39

cisco adaptive security appliance software 8.2.5.26

cisco adaptive security appliance software 8.3.2

cisco adaptive security appliance software 8.3.2.33

cisco adaptive security appliance software 8.2.4

cisco adaptive security appliance software 8.2.5.57

cisco adaptive security appliance software 8.3.2.41

cisco adaptive security appliance software 8.2.4.1

cisco adaptive security appliance software 8.2.3

cisco adaptive security appliance software 8.3.1.4

cisco adaptive security appliance software 8.3.2.44

cisco adaptive security appliance software 8.3.2.34

cisco adaptive security appliance software 8.2.5.50

cisco adaptive security appliance software 8.2.5

cisco adaptive security appliance software 8.3.2.13

cisco adaptive security appliance software 8.2.5.13

cisco adaptive security appliance software 8.3.2.23

cisco adaptive security appliance software 8.2.5.52

cisco adaptive security appliance software 8.3.2.31

cisco adaptive security appliance software 8.2.5.55

cisco adaptive security appliance software 8.3.2.4

cisco adaptive security appliance software 8.1.0.104

cisco adaptive security appliance software 8.2.2.17

cisco adaptive security appliance software 8.2.2.9

cisco adaptive security appliance software 8.2.2.16

cisco adaptive security appliance software 8.3.2.25

cisco adaptive security appliance software 8.2.1.11

cisco adaptive security appliance software 8.2.5.46

cisco adaptive security appliance software 8.2.5.48

cisco adaptive security appliance software 8.2.0.45

cisco adaptive security appliance software 8.4.3

cisco adaptive security appliance software 8.4.4.9

cisco adaptive security appliance software 8.4.4

cisco adaptive security appliance software 8.4.0

cisco adaptive security appliance software 8.4.1.3

cisco adaptive security appliance software 8.4.7.29

cisco adaptive security appliance software 8.4.1.11

cisco adaptive security appliance software 8.4.7.22

cisco adaptive security appliance software 8.4.2.1

cisco adaptive security appliance software 8.4.4.1

cisco adaptive security appliance software 8.4.7

cisco adaptive security appliance software 8.4.7.26

cisco adaptive security appliance software 8.4.5

cisco adaptive security appliance software 8.4.7.15

cisco adaptive security appliance software 8.4.4.5

cisco adaptive security appliance software 8.4.3.8

cisco adaptive security appliance software 8.4.7.23

cisco adaptive security appliance software 8.4.3.9

cisco adaptive security appliance software 8.4.6

cisco adaptive security appliance software 8.4.5.6

cisco adaptive security appliance software 8.4.7.3

cisco adaptive security appliance software 8.4.4.3

cisco adaptive security appliance software 8.4.2.8

cisco adaptive security appliance software 8.4.1

cisco adaptive security appliance software 8.4.7.28

cisco adaptive security appliance software 8.4.2

cisco adaptive security appliance software 8.6.1

cisco adaptive security appliance software 8.5.1.18

cisco adaptive security appliance software 8.5.1.14

cisco adaptive security appliance software 8.5.1.19

cisco adaptive security appliance software 8.6.1.13

cisco adaptive security appliance software 8.6.1.2

cisco adaptive security appliance software 8.5.1.7

cisco adaptive security appliance software 8.6.1.14

cisco adaptive security appliance software 8.5.1.24

cisco adaptive security appliance software 8.6.1.17

cisco adaptive security appliance software 8.5.1.21

cisco adaptive security appliance software 8.6.1.10

cisco adaptive security appliance software 8.5.1.1

cisco adaptive security appliance software 8.6.1.1

cisco adaptive security appliance software 8.5.1

cisco adaptive security appliance software 8.5.1.6

cisco adaptive security appliance software 8.6.1.5

cisco adaptive security appliance software 8.5.1.17

cisco adaptive security appliance software 8.7.1.4

cisco adaptive security appliance software 8.7.1.16

cisco adaptive security appliance software 9.0.4.37

cisco adaptive security appliance software 9.0.4

cisco adaptive security appliance software 9.0.4.5

cisco adaptive security appliance software 8.7.1.7

cisco adaptive security appliance software 9.0.4.7

cisco adaptive security appliance software 9.0.4.26

cisco adaptive security appliance software 9.0.3.8

cisco adaptive security appliance software 9.0.4.35

cisco adaptive security appliance software 8.7.1.17

cisco adaptive security appliance software 9.0.4.17

cisco adaptive security appliance software 8.7.1

cisco adaptive security appliance software 9.0.3.6

cisco adaptive security appliance software 8.7.1.8

cisco adaptive security appliance software 9.0.2.10

cisco adaptive security appliance software 9.0.1

cisco adaptive security appliance software 9.0.4.33

cisco adaptive security appliance software 9.0.4.24

cisco adaptive security appliance software 8.7.1.11

cisco adaptive security appliance software 9.0.2

cisco adaptive security appliance software 9.0.4.20

cisco adaptive security appliance software 9.0.4.29

cisco adaptive security appliance software 8.7.1.3

cisco adaptive security appliance software 8.7.1.1

cisco adaptive security appliance software 9.0.3

cisco adaptive security appliance software 8.7.1.13

cisco adaptive security appliance software 9.0.4.1

cisco unity connection 7.1\\(3b\\)

cisco unity connection 9.1\\(2\\)

cisco unity connection 8.6\\(2a\\)

cisco unity connection 1.2_base

cisco unity connection 11.0\\(0.98000.332\\)

cisco unity connection 7.1\\(5a\\)

cisco unity connection 9.1\\(1\\)

cisco unity connection 7.1\\(2\\)

cisco unity connection 10.5\\(2\\)

cisco unity connection 7.1\\(5b\\)su2

cisco unity connection 8.6\\(2a\\)su2

cisco unity connection 7.1\\(5b\\)su6

cisco unity connection 7.1\\(5b\\)su4

cisco unity connection 7.1\\(3a\\)su1

cisco unity connection 2.1_base

cisco unity connection 10.5\\(2.3009\\)

cisco unity connection 10.5_base

cisco unity connection 7.1\\(1\\)

cisco unity connection 8.6\\(2a\\)su1

cisco unity connection 8.6\\(1a\\)

cisco unity connection 11.5\\(0.98\\)

cisco unity connection 8.5\\(1\\)su3

cisco unity connection 8.5\\(1\\)su4

cisco unity connection 8.6\\(2a\\)su3

cisco unity connection 11.0\\(0.98000.225\\)

cisco unity connection 7.1\\(2a\\)

cisco unity connection 11.5\\(0.199\\)

cisco unity connection 7.1\\(5\\)

cisco unity connection 10.0.5

cisco unity connection 2.0_base

cisco unity connection 8.5\\(1\\)su2

cisco unity connection 8.0_base

cisco unity connection 7.1.5es33.32900-33

cisco unity connection 7.1\\(3b\\)su1

cisco unity connection 10.0.0

cisco unity connection 2.0\\(1\\)

cisco unity connection 8.6\\(1\\)

cisco unity connection 11.0_0

cisco unity connection 7.1\\(5b\\)su3

cisco unity connection 7.1\\(2b\\)su1

cisco unity connection 7.1\\(3a\\)

cisco unity connection 7.1\\(5b\\)

cisco unity connection 9.0\\(1\\)

cisco unity connection 1.1\\(1\\)

cisco unity connection 8.5\\(1\\)su5

cisco unity connection 7.1\\(3\\)

cisco unity connection 7.1\\(5\\)su1a

cisco unity connection 8.5\\(1\\)

cisco unity connection 7.1\\(5b\\)su5

cisco unity connection 8.5\\(1\\)su6

cisco unity connection 11.5_base

cisco unity connection 7.1\\(5b\\)su6a

cisco unity connection 9.1\\(1.10\\)

cisco unity connection 7.1\\(3a\\)su1a

cisco unity connection 8.6_base

cisco unity connection 8.5_base

cisco unity connection 7.1\\(2a\\)su1

cisco unity connection 8.6\\(2\\)

cisco unity connection 7.0_base

cisco unity connection 7.1\\(2b\\)

cisco unity connection 7.1\\(3b\\)su2

cisco unity connection 8.5\\(1\\)su1

cisco unity connection 7.1_base

cisco jabber software development kit 9.2\\(2\\)

cisco jabber software development kit 8.6\\(1\\)

cisco jabber software development kit 9.3\\(1\\)

cisco jabber software development kit 9.2\\(3\\)

cisco jabber software development kit 9.2\\(5\\)

cisco jabber software development kit 9.3\\(0\\)

cisco jabber software development kit 9.2\\(4\\)

cisco jabber software development kit 9.2\\(1\\)

cisco jabber software development kit 9.3\\(2\\)

cisco jabber software development kit 9.2\\(6\\)

cisco jabber software development kit 9.2\\(0\\)

cisco jabber software development kit 9.0\\(1\\)

cisco jabber software development kit 9.2\\(7\\)

cisco libsrtp

cisco unified communications manager 9.9\\(9\\)st1.9

Vendor Advisories

Debian Bug report logs - #807698 srtp: CVE-2015-6360: Prevent potential DoS attack due to lack of bounds checking on RTP header CSRC count and extension header length Package: src:srtp; Maintainer for src:srtp is Jonas Smedegaard <dr@jonesdk>; Reported by: Guido Günther <agx@sigxcpuorg> Date: Fri, 11 Dec 2015 17:27 ...
Randell Jesup and the Firefox team discovered that srtp, Cisco's reference implementation of the Secure Real-time Transport Protocol (SRTP), does not properly handle RTP header CSRC count and extension header length A remote attacker can exploit this vulnerability to crash an application linked against libsrtp, resulting in a denial of service Fo ...
Buffer overflow in srtpc in libsrtp in srtp 145 and earlier allows remote attackers to cause a denial of service (crash) via vectors related to a length inconsistency in the crypto_policy_set_from_profile_for_rtp and srtp_protect functions (CVE-2013-2139) The encryption-processing feature in Cisco libSRTP before 153 allows remote attackers to ...
The encryption-processing feature in Cisco libSRTP before 153 allows remote attackers to cause a denial of service via crafted fields in SRTP packets, aka Bug ID CSCux00686 ...