NetSight
IP …
high7.5

CVE-2015-6360

The encryption-processing feature in Cisco libSRTP before 1.5.3 allows remote attackers to cause a denial of service via crafted fields in SRTP packets, aka Bu…

Impact

The encryption-processing feature in Cisco libSRTP before 1.5.3 allows remote attackers to cause a denial of service via crafted fields in SRTP packets, aka Bug ID CSCux00686.

Affected products

VendorProductAffected versions
CiscoIos Xe
Versions 3.10s_3.10.0s, 3.10s_3.10.1s, 3.10s_3.10.1xbs, 3.10s_3.10.2s, 3.10s_3.10.2ts, 3.10s_3.10.4s
CiscoWebex Meeting Center
Version base
CiscoDx Series Ip Phones Firmware
Version 9.3\(2\)
CiscoIp Phone 7800 Series Firmware
Version 10.3\(1\)
CiscoIp Phone 8800 Series Firmware
Versions 10.3\(2\), 11.0\(1\)
CiscoUnified Ip Phone 6900 Series Firmware
Version 9.3\(2\)
CiscoUnified Ip Phone 7900 Series Firmware
Versions 9.9\(9.99001.1\), 9.9_base
CiscoUnified Ip Phone 8900 Series Firmware
Versions 9.0\(1\)sr1, 9.0\(3\), 9.0\(4\), 9.1\(1\)sr1, 9.1\(2\), 9.2\(1\)
CiscoUnified Wireless Ip Phone 7920 Firmware
Versions 1.0\(5\), 1.0\(6\), 1.0\(7\), 1.0\(8\), 1.0\(9\), 1.0_base
CiscoAdaptive Security Appliance Software
Versions 8.1.0.104, 8.2.0.45, 8.2.1, 8.2.1.11, 8.2.2, 8.2.2.9
CiscoUnity Connection
Versions 1.1\(1\), 1.2_base, 2.0\(1\), 2.0_base, 2.1_base, 7.0_base
CiscoJabber Software Development Kit
Versions 8.6\(1\), 9.0\(1\), 9.2\(0\), 9.2\(1\), 9.2\(2\), 9.2\(3\)

Weakness classification

CWE-119

References