Cisco Libsrtp vulnerabilities

2 vulnerabilities

Known vulnerabilities in Cisco Libsrtp, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

2.6CVE-2013-2139ciscolibsrtp+4
EPSS score
2.99%
Buffer overflow in srtp.c in libsrtp in srtp 1.4.5 and earlier allows remote attackers to cause a denial of service (crash) via vectors related to a length inconsistency in the crypto_policy_set_from_profile_for_rtp and srtp_protect functions.7.8CVE-2015-6360ciscoadaptive_security_appliance_software+15
EPSS score
8.28%
The encryption-processing feature in Cisco libSRTP before 1.5.3 allows remote attackers to cause a denial of service via crafted fields in SRTP packets, aka Bug ID CSCux00686.