7.8

CVE-2015-6360

The encryption-processing feature in Cisco libSRTP before 1.5.3 allows remote attackers to cause a denial of service via crafted fields in SRTP packets, aka Bug ID CSCux00686.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Cisco ≫ Ios Xe Version 3.10s_3.10.0s
Cisco ≫ Ios Xe Version 3.10s_3.10.1s
Cisco ≫ Ios Xe Version 3.10s_3.10.1xbs
Cisco ≫ Ios Xe Version 3.10s_3.10.2s
Cisco ≫ Ios Xe Version 3.10s_3.10.2ts
Cisco ≫ Ios Xe Version 3.10s_3.10.4s
Cisco ≫ Ios Xe Version 3.10s_3.10.5s
Cisco ≫ Ios Xe Version 3.10s_3.10.6s
Cisco ≫ Ios Xe Version 3.10s_3.10.7s
Cisco ≫ Ios Xe Version 3.11s_3.11.0s
Cisco ≫ Ios Xe Version 3.11s_3.11.1s
Cisco ≫ Ios Xe Version 3.11s_3.11.2s
Cisco ≫ Ios Xe Version 3.11s_3.11.3s
Cisco ≫ Ios Xe Version 3.11s_3.11.4s
Cisco ≫ Ios Xe Version 3.13s_3.13.0s
Cisco ≫ Ios Xe Version 3.13s_3.13.1s
Cisco ≫ Ios Xe Version 3.13s_3.13.4s
Cisco ≫ Ios Xe Version 3.14s_3.14.0s
Cisco ≫ Ios Xe Version 3.15s_3.15.1s
Cisco ≫ Ios Xe Version 3.15s_3.15.2s
Cisco ≫ Webex Meeting Center Version base
Cisco ≫ Unity Connection Version 1.2_base
Cisco ≫ Unity Connection Version 2.0_base
Cisco ≫ Unity Connection Version 2.1_base
Cisco ≫ Unity Connection Version 7.0_base
Cisco ≫ Unity Connection Version 7.1.5es33.32900-33
Cisco ≫ Unity Connection Version 7.1_base
Cisco ≫ Unity Connection Version 8.0_base
Cisco ≫ Unity Connection Version 8.5_base
Cisco ≫ Unity Connection Version 8.6_base
Cisco ≫ Unity Connection Version 10.0.0
Cisco ≫ Unity Connection Version 10.0.5
Cisco ≫ Unity Connection Version 10.5_base
Cisco ≫ Unity Connection Version 11.0_0
Cisco ≫ Unity Connection Version 11.5_base
Cisco ≫ Libsrtp Version <= 1.5.2
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 8.28% 0.942
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.5 3.9 3.6
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
NIST 7.8 10 6.9
AV:N/AC:L/Au:N/C:N/I:N/A:C
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160420-libsrtp
Vendor Advisory
http://www.debian.org/security/2016/dsa-3539
http://www.securitytracker.com/id/1035636
http://www.securitytracker.com/id/1035637
http://www.securitytracker.com/id/1035648
http://www.securitytracker.com/id/1035649
http://www.securitytracker.com/id/1035650
http://www.securitytracker.com/id/1035651
http://www.securitytracker.com/id/1035652