The encryption-processing feature in Cisco libSRTP before 1.5.3 allows remote attackers to cause a denial of service via crafted fields in SRTP packets, aka Bug ID CSCux00686.

Project Subscriptions

Vendors Products
Adaptive Security Appliance Software Subscribe
Dx Series Ip Phones Firmware Subscribe
Ip Phone 7800 Series Firmware Subscribe
Ip Phone 8800 Series Firmware Subscribe
Jabber Software Development Kit Subscribe
Libsrtp Subscribe
Unified Communications Manager Subscribe
Unified Ip Phone 6900 Series Firmware Subscribe
Unified Ip Phone 7900 Series Firmware Subscribe
Unified Ip Phone 8900 Series Firmware Subscribe
Unified Wireless Ip Phone 7920 Firmware Subscribe
Unity Connection Subscribe
Webex Meeting Center Subscribe
Enterprise Linux Subscribe
Advisories
Source ID Title
Debian DLA Debian DLA DLA-393-1 srtp security update
Debian DSA Debian DSA DSA-3539-1 srtp security update
Fixes

Solution

No solution given by the vendor.


Workaround

No workaround given by the vendor.

History

No history.

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: cisco

Published:

Updated: 2024-08-06T07:22:21.120Z

Reserved: 2015-08-17T00:00:00.000Z

Link: CVE-2015-6360

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Deferred

Published: 2016-04-21T10:59:00.117

Modified: 2025-04-12T10:46:40.837

Link: CVE-2015-6360

cve-icon Redhat

Severity : Moderate

Publid Date: 2016-04-02T00:00:00Z

Links: CVE-2015-6360 - Bugzilla

cve-icon OpenCVE Enrichment

No data.

Weaknesses