CVE Feed

    Dashboard / CVE / CVE-2015-6360

    CVE-2015-6360

    The encryption-processing feature in Cisco libSRTP before 1.5.3 allows remote attackers to cause a denial of service via crafted fields in SRTP packets, aka Bug ID CSCux00686.

    Published:Apr 2, 2016
    Last Modified:Apr 12, 2025
    EPS:Apr 21, 2016
    EPSS Score:0.1794
    CVSS Score:7.5

    Affected Products

    Vendor
    Cisco
    Product
    Adaptive Security Appliance Software
    Vendor
    Cisco
    Product
    Dx Series Ip Phones Firmware
    Vendor
    Cisco
    Product
    Ios Xe
    Vendor
    Cisco
    Product
    Ip Phone 7800 Series Firmware
    Vendor
    Cisco
    Product
    Ip Phone 8800 Series Firmware
    Vendor
    Cisco
    Product
    Jabber Software Development Kit
    Vendor
    Cisco
    Product
    Libsrtp
    Vendor
    Cisco
    Product
    Unified Communications Manager
    Vendor
    Cisco
    Product
    Unified Ip Phone 6900 Series Firmware
    Vendor
    Cisco
    Product
    Unified Ip Phone 7900 Series Firmware
    Vendor
    Cisco
    Product
    Unified Ip Phone 8900 Series Firmware
    Vendor
    Cisco
    Product
    Unified Wireless Ip Phone 7920 Firmware
    Vendor
    Cisco
    Product
    Unity Connection
    Vendor
    Cisco
    Product
    Webex Meeting Center
    Vendor
    Redhat
    Product
    Enterprise Linux

    Exploits

    No exploit reference

    Related CVEs

    CVE-2026-20349 (CVSS 8.6) — A vulnerability in the Remote Access SSL VPN service for Cisco Secure Firewall Adaptive Security Appliance (AS…
    CVE-2026-20025 (CVSS 6.8) — A vulnerability in the OSPF protocol of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could…
    CVE-2026-20024 (CVSS 6.8) — A vulnerability in the OSPF protocol of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could…
    CVE-2026-20023 (CVSS 6.1) — A vulnerability in the OSPF protocol of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and C…
    CVE-2026-20022 (CVSS 6.1) — A vulnerability in the OSPF protocol of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could…
    CVE-2026-20021 (CVSS 4.3) — A vulnerability in the OSPF protocol of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and C…
    CVE-2026-20020 (CVSS 6.8) — A vulnerability in the OSPF protocol of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could…
    CVE-2026-20016 (CVSS 6) — A vulnerability in the Cisco FXOS Software CLI feature for Cisco Secure Firewall ASA Software and Secure FTD S…
    CVE-2026-20073 (CVSS 5.8) — A vulnerability in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall …
    CVE-2026-20102 (CVSS 6.1) — A vulnerability in the SAML 2.0 single sign-on (SSO) feature of Cisco Secure Firewall ASA Software and Cisco S…

    References

    http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160420-libsrtp
    http://www.debian.org/security/2016/dsa-3539
    http://www.securitytracker.com/id/1035636
    http://www.securitytracker.com/id/1035637
    http://www.securitytracker.com/id/1035648
    http://www.securitytracker.com/id/1035649
    http://www.securitytracker.com/id/1035650
    http://www.securitytracker.com/id/1035651
    http://www.securitytracker.com/id/1035652
    http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160420-libsrtp
    http://www.debian.org/security/2016/dsa-3539
    http://www.securitytracker.com/id/1035636
    http://www.securitytracker.com/id/1035637
    http://www.securitytracker.com/id/1035648
    http://www.securitytracker.com/id/1035649
    http://www.securitytracker.com/id/1035650
    http://www.securitytracker.com/id/1035651
    http://www.securitytracker.com/id/1035652

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High