Libsrtp

Vendor:

First CVE: Jan 16, 2014 · Active for 12 years

2
Total CVEs
More Total CVEs than 49% of tracked products
1.0
Avg CVEs / Year
Bottom 1%
5.0
Avg CVSS
Higher Avg CVSS than 9% of tracked products
0.0%
KEV Rate
Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact Libsrtp over time

Volume of CVEsAvg CVSS Base Score
First CVE
Jan 16, 2014
12 years ago
Most Recent CVE
Apr 21, 2016
3,748 days ago

CVE Severity & Scoring

Libsrtp2 CVEs
All CVEs352,713 CVEs
LowHigh
Attack Vector
Local0 (0.0%)
Network1 (50.0%)
Unknown1 (50.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low1 (50.0%)
High0 (0.0%)
Unknown1 (50.0%)
User Interaction
None1 (50.0%)
Unknown1 (50.0%)
Required0 (0.0%)
Privileges Required
Low0 (0.0%)
High0 (0.0%)
None1 (50.0%)
Unknown1 (50.0%)

Top CVEs

Signals from CVEs in this product scope (2 CVEs).

2 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
The encryption-processing feature in Cisco libSRTP before 1.5.3 allows remote attackers to cause a denial of service via crafted fields in SRTP packets, aka Bug ID CSCux00686.
Apr 21, 20167.522NONO
Buffer overflow in srtp.c in libsrtp in srtp 1.4.5 and earlier allows remote attackers to cause a denial of service (crash) via vectors related to a length inconsistency in the cry
Jan 16, 20142.612NONO

Exploit Exposure

Signals from CVEs in this product scope (2 CVEs).

CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%

Social Chatter

Signals from CVEs in this product scope (2 CVEs).

Media Mentions

Signals from CVEs in this product scope (2 CVEs).

Top CNAs Publishing CVEs For Libsrtp

Top CWEs

Versions

VersionCVE CountAvg CVSSAvg EPSSKEVExploits
1.4.412.63.0%00
1.4.212.63.0%00
1.4.112.63.0%00
1.4.012.63.0%00
1.3.2012.63.0%00
1.0.612.63.0%00
1.0.512.63.0%00
1.0.412.63.0%00
1.0.212.63.0%00
1.0.112.63.0%00