CVE:CVE-2015-6360
CNNVD:CNNVD-201603-465
Cisco libsrtp是美国思科（Cisco）公司的一个用于实现安全实时传输协议（SRTP）的库。RTP用于IP语音（VoIP）以及音频和视频流。SRTP增加了保密性和认证。
Cisco libsrtp 1.5.3之前版本的encryption-processing功能中存在安全漏洞。远程攻击者可借助SRTP数据包中特制的字段利用该漏洞造成拒绝服务。
solution:Upgrade cisco ios_xe to a higher version than 3.10s_3.10.0s,3.10s_3.10.1s,3.10s_3.10.1xbs,3.10s_3.10.2s,3.10s_3.10.2ts,3.10s_3.10.4s,3.10s_3.10.5s,3.10s_3.10.6s,3.10s_3.10.7s,3.11s_3.11.0s,3.11s_3.11.1s,3.11s_3.11.2s,3.11s_3.11.3s,3.11s_3.11.4s,3.13s_3.13.0s,3.13s_3.13.1s,3.13s_3.13.4s,3.14s_3.14.0s,3.15s_3.15.1s,3.15s_3.15.2s,and avoid the version 3.10s_3.10.0s,3.10s_3.10.1s,3.10s_3.10.1xbs,3.10s_3.10.2s,3.10s_3.10.2ts,3.10s_3.10.4s,3.10s_3.10.5s,3.10s_3.10.6s,3.10s_3.10.7s,3.11s_3.11.0s,3.11s_3.11.1s,3.11s_3.11.2s,3.11s_3.11.3s,3.11s_3.11.4s,3.13s_3.13.0s,3.13s_3.13.1s,3.13s_3.13.4s,3.14s_3.14.0s,3.15s_3.15.1s,3.15s_3.15.2s; Upgrade cisco webex_meeting_center to a higher version than base,and avoid the version base; Upgrade cisco dx_series_ip_phones_firmware to a higher version than 9.3(2,and avoid the version 9.3(2); Upgrade cisco ip_phone_7800_series_firmware to a higher version than 10.3(1,and avoid the version 10.3(1); Upgrade cisco ip_phone_8800_series_firmware to a higher version than 10.3(2,11.0(1,and avoid the version 10.3(2),11.0(1); Upgrade cisco unified_ip_phone_6900_series_firmware to a higher version than 9.3(2,and avoid the version 9.3(2); Upgrade cisco unified_ip_phone_7900_series_firmware to a higher version than 9.9(9.99001.1,9.9_base,and avoid the version 9.9(9.99001.1),9.9_base; Upgrade cisco unified_ip_phone_8900_series_firmware to a higher version than 9.0(1sr1,9.0(3,9.0(4,9.1(1sr1,9.1(2,9.2(1,9.2(2,9.2(2sr1,9.2(3,9.2(4,9.3(1,9.3(2,9.3(2sr1,9.3(4,9.4(1,9.4(1sr1,9.4(2,and avoid the version 9.0(1)sr1,9.0(3),9.0(4),9.1(1)sr1,9.1(2),9.2(1),9.2(2),9.2(2)sr1,9.2(3),9.2(4),9.3(1),9.3(2),9.3(2)sr1,9.3(4),9.4(1),9.4(1)sr1,9.4(2); Upgrade cisco unified_wireless_ip_phone_7920_firmware to a higher version than 1.0(5,1.0(6,1.0(7,1.0(8,1.0(9,1.0_base,2.0_base,and avoid the version 1.0(5),1.0(6),1.0(7),1.0(8),1.0(9),1.0_base,2.0_base; Upgrade cisco adaptive_security_appliance_software to a higher version than 8.1.0.104,8.2.0.45,8.2.1,8.2.1.11,8.2.2,8.2.2.9,8.2.2.10,8.2.2.12,8.2.2.16,8.2.2.17,8.2.3,8.2.4,8.2.4.1,8.2.4.4,8.2.5,8.2.5.13,8.2.5.22,8.2.5.26,8.2.5.33,8.2.5.40,8.2.5.41,8.2.5.46,8.2.5.48,8.2.5.50,8.2.5.52,8.2.5.55,8.2.5.57,8.3.1,8.3.1.1,8.3.1.4,8.3.1.6,8.3.2,8.3.2.4,8.3.2.13,8.3.2.23,8.3.2.25,8.3.2.31,8.3.2.33,8.3.2.34,8.3.2.37,8.3.2.39,8.3.2.40,8.3.2.41,8.3.2.44,8.4.0,8.4.1,8.4.1.3,8.4.1.11,8.4.2,8.4.2.1,8.4.2.8,8.4.3,8.4.3.8,8.4.3.9,8.4.4,8.4.4.1,8.4.4.3,8.4.4.5,8.4.4.9,8.4.5,8.4.5.6,8.4.6,8.4.7,8.4.7.3,8.4.7.15,8.4.7.22,8.4.7.23,8.4.7.26,8.4.7.28,8.4.7.29,8.5.1,8.5.1.1,8.5.1.6,8.5.1.7,8.5.1.14,8.5.1.17,8.5.1.18,8.5.1.19,8.5.1.21,8.5.1.24,8.6.1,8.6.1.1,8.6.1.2,8.6.1.5,8.6.1.10,8.6.1.12,8.6.1.13,8.6.1.14,8.6.1.17,8.7.1,8.7.1.1,8.7.1.3,8.7.1.4,8.7.1.7,8.7.1.8,8.7.1.11,8.7.1.13,8.7.1.16,8.7.1.17,9.0.1,9.0.2,9.0.2.10,9.0.3,9.0.3.6,9.0.3.8,9.0.4,9.0.4.1,9.0.4.5,9.0.4.7,9.0.4.17,9.0.4.20,9.0.4.24,9.0.4.26,9.0.4.29,9.0.4.33,9.0.4.35,9.0.4.37,9.1.1,9.1.1.4,9.1.2,9.1.2.8,9.1.3,9.1.3.2,9.1.4,9.1.4.5,9.1.5,9.1.5.10,9.1.5.12,9.1.5.15,9.1.5.21,9.1.6,9.1.6.1,9.1.6.4,9.1.6.6,9.1.6.8,9.1.6.10,9.2(0.0,9.2(0.104,9.2(3.1,9.2.1,9.2.2,9.2.2.4,9.2.2.7,9.2.2.8,9.2.3,9.2.3.3,9.2.3.4,9.2.4,9.3(1.50,9.3(1.105,9.3(2.100,9.3(2.243,9.3.1,9.3.1.1,9.3.2,9.3.2.2,9.3.3,9.3.3.1,9.3.3.2,9.3.3.5,9.3.5,and avoid the version 8.1.0.104,8.2.0.45,8.2.1,8.2.1.11,8.2.2,8.2.2.9,8.2.2.10,8.2.2.12,8.2.2.16,8.2.2.17,8.2.3,8.2.4,8.2.4.1,8.2.4.4,8.2.5,8.2.5.13,8.2.5.22,8.2.5.26,8.2.5.33,8.2.5.40,8.2.5.41,8.2.5.46,8.2.5.48,8.2.5.50,8.2.5.52,8.2.5.55,8.2.5.57,8.3.1,8.3.1.1,8.3.1.4,8.3.1.6,8.3.2,8.3.2.4,8.3.2.13,8.3.2.23,8.3.2.25,8.3.2.31,8.3.2.33,8.3.2.34,8.3.2.37,8.3.2.39,8.3.2.40,8.3.2.41,8.3.2.44,8.4.0,8.4.1,8.4.1.3,8.4.1.11,8.4.2,8.4.2.1,8.4.2.8,8.4.3,8.4.3.8,8.4.3.9,8.4.4,8.4.4.1,8.4.4.3,8.4.4.5,8.4.4.9,8.4.5,8.4.5.6,8.4.6,8.4.7,8.4.7.3,8.4.7.15,8.4.7.22,8.4.7.23,8.4.7.26,8.4.7.28,8.4.7.29,8.5.1,8.5.1.1,8.5.1.6,8.5.1.7,8.5.1.14,8.5.1.17,8.5.1.18,8.5.1.19,8.5.1.21,8.5.1.24,8.6.1,8.6.1.1,8.6.1.2,8.6.1.5,8.6.1.10,8.6.1.12,8.6.1.13,8.6.1.14,8.6.1.17,8.7.1,8.7.1.1,8.7.1.3,8.7.1.4,8.7.1.7,8.7.1.8,8.7.1.11,8.7.1.13,8.7.1.16,8.7.1.17,9.0.1,9.0.2,9.0.2.10,9.0.3,9.0.3.6,9.0.3.8,9.0.4,9.0.4.1,9.0.4.5,9.0.4.7,9.0.4.17,9.0.4.20,9.0.4.24,9.0.4.26,9.0.4.29,9.0.4.33,9.0.4.35,9.0.4.37,9.1.1,9.1.1.4,9.1.2,9.1.2.8,9.1.3,9.1.3.2,9.1.4,9.1.4.5,9.1.5,9.1.5.10,9.1.5.12,9.1.5.15,9.1.5.21,9.1.6,9.1.6.1,9.1.6.4,9.1.6.6,9.1.6.8,9.1.6.10,9.2(0.0),9.2(0.104),9.2(3.1),9.2.1,9.2.2,9.2.2.4,9.2.2.7,9.2.2.8,9.2.3,9.2.3.3,9.2.3.4,9.2.4,9.3(1.50),9.3(1.105),9.3(2.100),9.3(2.243),9.3.1,9.3.1.1,9.3.2,9.3.2.2,9.3.3,9.3.3.1,9.3.3.2,9.3.3.5,9.3.5; Upgrade cisco unity_connection to a higher version than 1.1(1,1.2_base,2.0(1,2.0_base,2.1_base,7.0_base,7.1(1,7.1(2,7.1(2a,7.1(2asu1,7.1(2b,7.1(2bsu1,7.1(3,7.1(3a,7.1(3asu1,7.1(3asu1a,7.1(3b,7.1(3bsu1,7.1(3bsu2,7.1(5,7.1(5su1a,7.1(5a,7.1(5b,7.1(5bsu2,7.1(5bsu3,7.1(5bsu4,7.1(5bsu5,7.1(5bsu6,7.1(5bsu6a,7.1.5es33.32900-33,7.1_base,8.0_base,8.5(1,8.5(1su1,8.5(1su2,8.5(1su3,8.5(1su4,8.5(1su5,8.5(1su6,8.5_base,8.6(1,8.6(1a,8.6(2,8.6(2a,8.6(2asu1,8.6(2asu2,8.6(2asu3,8.6_base,9.0(1,9.1(1,9.1(1.10,9.1(2,10.0.0,10.0.5,10.5(2,10.5(2.3009,10.5_base,11.0(0.98000.225,11.0(0.98000.332,11.0_0,11.5(0.98,11.5(0.199,11.5_base,and avoid the version 1.1(1),1.2_base,2.0(1),2.0_base,2.1_base,7.0_base,7.1(1),7.1(2),7.1(2a),7.1(2a)su1,7.1(2b),7.1(2b)su1,7.1(3),7.1(3a),7.1(3a)su1,7.1(3a)su1a,7.1(3b),7.1(3b)su1,7.1(3b)su2,7.1(5),7.1(5)su1a,7.1(5a),7.1(5b),7.1(5b)su2,7.1(5b)su3,7.1(5b)su4,7.1(5b)su5,7.1(5b)su6,7.1(5b)su6a,7.1.5es33.32900-33,7.1_base,8.0_base,8.5(1),8.5(1)su1,8.5(1)su2,8.5(1)su3,8.5(1)su4,8.5(1)su5,8.5(1)su6,8.5_base,8.6(1),8.6(1a),8.6(2),8.6(2a),8.6(2a)su1,8.6(2a)su2,8.6(2a)su3,8.6_base,9.0(1),9.1(1),9.1(1.10),9.1(2),10.0.0,10.0.5,10.5(2),10.5(2.3009),10.5_base,11.0(0.98000.225),11.0(0.98000.332),11.0_0,11.5(0.98),11.5(0.199),11.5_base; Upgrade cisco jabber_software_development_kit to a higher version than 8.6(1,9.0(1,9.2(0,9.2(1,9.2(2,9.2(3,9.2(4,9.2(5,9.2(6,9.2(7,9.3(0,9.3(1,9.3(2,and avoid the version 8.6(1),9.0(1),9.2(0),9.2(1),9.2(2),9.2(3),9.2(4),9.2(5),9.2(6),9.2(7),9.3(0),9.3(1),9.3(2); Upgrade cisco libsrtp to a higher version than 1.5.2,and avoid the version (,1.5.2]; Upgrade cisco unified_communications_manager to a higher version than 9.9(9st1.9,and avoid the version 9.9(9)st1.9