The encryption-processing feature in Cisco libSRTP before 1.5.3 allows remote attackers to cause a denial of service via crafted fields in SRTP packets, aka Bug ID CSCux00686.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade libsrtp-develUpgrade libsrtp-debuginfoUpgrade libsrtp | Oct 28, 2020 | Apr 21, 2016 |
| Centos_linux | — | Upgrade libsrtp-develUpgrade libsrtp-debuginfoUpgrade libsrtp | Oct 1, 2020 | Apr 21, 2016 |
| Cisco Asa | — | Upgrade to Cisco ASA version 8.4(7.31)Upgrade to Cisco ASA version 9.1(7)Upgrade to Cisco ASA version 9.3(3.8)Upgrade to Cisco ASA version 9.2(4.6) | Feb 9, 2017 | Apr 21, 2016 |
| Cisco Xe | — | Upgrade to the latest version of Cisco IOS XE | Jul 30, 2019 | Apr 21, 2016 |
| Debian | — | Upgrade srtp | Apr 7, 2016 | Apr 2, 2016 |
| Freebsd | — | Upgrade libsrtp | Dec 10, 2025 | Feb 21, 2016 |
| Huawei Euleros 2_0_sp2 | — | Upgrade libsrtp | Dec 4, 2019 | Apr 21, 2016 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libsrtp | Dec 18, 2019 | Apr 21, 2016 |
| Oracle_linux | — | Upgrade libsrtpUpgrade libsrtp-devel | Oct 13, 2020 | Apr 21, 2016 |
| Redhat_linux | — | Upgrade libsrtpUpgrade libsrtp-develUpgrade libsrtp-debuginfo | Oct 1, 2020 | Apr 21, 2016 |
| Suse | — | Upgrade libsrtp2-1Upgrade libsrtp-develUpgrade libsrtp1 | Sep 9, 2016 | Apr 21, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub