CVE-2015-6360

libsrtp: improper handling of CSRC count and extension header length in RTP header

Published Apr 21, 2016 CVSS 3.0 · 7.5 High EPSS 8.3% KEV · Not listed
Description
The encryption-processing feature in Cisco libSRTP before 1.5.3 allows remote attackers to cause a denial of service via crafted fields in SRTP packets, aka Bug ID CSCux00686.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DLA Debian DLA DLA-393-1 srtp security update
Debian DSA Debian DSA DSA-3539-1 srtp security update
History

No history.