Cisco Libsrtp vulnerabilities

2 CVEs affecting Cisco Libsrtp, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2015-6360, published 2016-04-21.

More from Cisco.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2015-6360, published 2016-04-21. High severity, CVSS 7.5. EPSS: 8.3% chance of exploitation in the next 30 days. The encryption-processing feature in Cisco libSRTP before 1.5.3 allows remote attackers to cause a denial of service via crafted fields in SRTP packets, aka Bug ID CSCux00686.
• CVE-2013-2139, published 2014-01-16. Low severity, CVSS 2.6. EPSS: 3% chance of exploitation in the next 30 days. Buffer overflow in srtp.c in libsrtp in srtp 1.4.5 and earlier allows remote attackers to cause a denial of service (crash) via vectors related to a length inconsistency in the…