Approved changes feed: RSS · Atom

cpe:2.3:a:cisco:libsrtp:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorCisco (e1b3baff-aaf9-56a6-a68a-41e28ce616a5)
ProductLibsrtp (dddbfbe7-304b-5767-bf49-5cadf162838f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/srtp purl2cpe 2026-06-01 10:12:57.868615
pkg:deb/ubuntu/srtp purl2cpe 2026-06-01 10:12:57.868618
pkg:github/cisco/libsrtp purl2cpe 2026-06-01 10:12:57.868621
pkg:gitlab/redhat/libsrtp purl2cpe 2026-06-01 10:12:57.868624
pkg:rpm/centos/libsrtp purl2cpe 2026-06-01 10:12:57.868627
pkg:rpm/fedora/libsrtp purl2cpe 2026-06-01 10:12:57.868629
pkg:rpm/opensuse/libsrtp purl2cpe 2026-06-01 10:12:57.868632
pkg:sourceforge/srtp purl2cpe 2026-06-01 10:12:57.868635

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2015-6360 vulnerable 2026-06-08 05:06:52.204568 Details available
The encryption-processing feature in Cisco libSRTP before 1.5.3 allows remote attackers to cause a denial of service via crafted fields in SRTP packets, aka Bug ID CSCux00686.
Published: 2016-04-21T10:00:00.000Z
Updated: 2024-08-06T07:22:21.120Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-2139 vulnerable 2026-06-08 05:03:58.574532 Details available
Buffer overflow in srtp.c in libsrtp in srtp 1.4.5 and earlier allows remote attackers to cause a denial of service (crash) via vectors related to a length inconsistency in the crypto_policy_set_from_profile_for_rtp and srtp_protect functions.
Published: 2014-01-16T02:00:00.000Z
Updated: 2024-08-06T15:27:40.955Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.