Cisco Libsrtp vulnerabilities

2 known vulnerabilities affecting cisco/libsrtp.

Total CVEs

2

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH1LOW1

Vulnerabilities

Page 1 of 1

CVE-2015-6360HIGHCVSS 7.5≤ 1.5.22016-04-21

CVE-2015-6360 [HIGH] CWE-119 CVE-2015-6360: The encryption-processing feature in Cisco libSRTP before 1.5.3 allows remote attackers to cause a d The encryption-processing feature in Cisco libSRTP before 1.5.3 allows remote attackers to cause a denial of service via crafted fields in SRTP packets, aka Bug ID CSCux00686.

CVE-2013-2139LOWCVSS 2.6≤ 1.4.5v1.0.1+9 more2014-01-16

CVE-2013-2139 [LOW] CWE-119 CVE-2013-2139: Buffer overflow in srtp.c in libsrtp in srtp 1.4.5 and earlier allows remote attackers to cause a de Buffer overflow in srtp.c in libsrtp in srtp 1.4.5 and earlier allows remote attackers to cause a denial of service (crash) via vectors related to a length inconsistency in the crypto_policy_set_from_profile_for_rtp and srtp_protect functions.