CVE-2015-6360: Cisco Adaptive Security Appliance Software
High severity, CVSS 7.5. EPSS: 8.3% chance of exploitation in the next 30 days.
The encryption-processing feature in Cisco libSRTP before 1.5.3 allows remote attackers to cause a denial of service via crafted fields in SRTP packets, aka Bug ID CSCux00686.
Affected products
- Cisco Adaptive Security Appliance Software: version 8.1.0.104 only; version 8.2.0.45 only; version 8.2.1 only; version 8.2.1.11 only; version 8.2.2 only; version 8.2.2.9 only; …
- Cisco Dx Series IP Phones Firmware: version 9.3(2) only
- Cisco IOS XE: version 3.10s_3.10.0s only; version 3.10s_3.10.1s only; version 3.10s_3.10.1xbs only; version 3.10s_3.10.2s only; version 3.10s_3.10.2ts only; version 3.10s_3.10.4s only; …
- Cisco IP Phone 7800 Series Firmware: version 10.3(1) only
- Cisco IP Phone 8800 Series Firmware: version 10.3(2) only; version 11.0(1) only
- Cisco Jabber Software Development Kit: version 8.6(1) only; version 9.0(1) only; version 9.2(0) only; version 9.2(1) only; version 9.2(2) only; version 9.2(3) only; …
- Cisco Libsrtp: up to and including 1.5.2
- Cisco Unified Communications Manager: version 9.9(9)st1.9 only
- Cisco Unified IP Phone 6900 Series Firmware: version 9.3(2) only
- Cisco Unified IP Phone 7900 Series Firmware: version 9.9(9.99001.1) only; version 9.9_base only
- Cisco Unified IP Phone 8900 Series Firmware: version 9.0(1)sr1 only; version 9.0(3) only; version 9.0(4) only; version 9.1(1)sr1 only; version 9.1(2) only; version 9.2(1) only; …
- Cisco Unified Wireless IP Phone 7920 Firmware: version 1.0(5) only; version 1.0(6) only; version 1.0(7) only; version 1.0(8) only; version 1.0(9) only; version 1.0_base only; …
- Cisco Unity Connection: version 1.1(1) only; version 1.2_base only; version 2.0(1) only; version 2.0_base only; version 2.1_base only; version 7.0_base only; …
- Cisco Webex Meeting Center: version base only
Published 2016-04-21. Last modified 2026-06-17.