CVE-2015-6360
Fixed in a distro release EPSS 8%
The encryption-processing feature in Cisco libSRTP before 1.5.3 allows remote attackers to cause a denial of service via crafted fields in SRTP packets, aka Bug ID CSCux00686.
Products: cisco ios_xe, cisco webex_meeting_center, cisco dx_series_ip_phones_firmware, cisco ip_phone_7800_series_firmware, cisco ip_phone_8800_series_firmware, cisco unified_ip_phone_6900_series_firmware, cisco unified_ip_phone_7900_series_firmware, cisco unified_ip_phone_8900_series_firmware, cisco unified_wireless_ip_phone_7920_firmware, cisco adaptive_security_appliance_software, cisco unity_connection, cisco jabber_software_development_kit, cisco libsrtp, cisco unified_communications_manager
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux 2 | libsrtp | 1.4.4-11.20101004cvs.amzn2 |
| Amazon Linux 2 | libsrtp-devel | 1.4.4-11.20101004cvs.amzn2 |
| Debian 6.0 | srtp | 1.4.4~dfsg-6+deb6u2 |
| Debian 7 | srtp | 1.4.4+20100615~dfsg-2+deb7u2 |
| Debian 8 | srtp | 1.4.5~20130609~dfsg-1.1+deb8u1 |
| Red Hat Enterprise Linux 7 | libsrtp | 0:1.4.4-11.20101004cvs.el7 |
| Red Hat Enterprise Linux 7 | libsrtp-debuginfo | 0:1.4.4-11.20101004cvs.el7 |
| Red Hat Enterprise Linux 7 | libsrtp-devel | 0:1.4.4-11.20101004cvs.el7 |
| openSUSE Tumbleweed | libsrtp | 1.5.4-2.1 |
| openSUSE Tumbleweed | libsrtp | 2.4.1-1.2 |