← Back

CVE-2017-14114

nvd nist
Published: Sep 2, 2017Modified: May 13, 2026

JSON object

Loading...
6.5
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L
Exploitability: 3.9 / Impact: 2.5
Source: NVD

Description

RTPproxy through 2.2.alpha.20160822 has a NAT feature that results in not properly determining the IP address and port number of the legitimate recipient of RTP traffic, which allows remote attackers to obtain sensitive information or cause a denial of service (communication outage) via crafted RTP packets.

Affected (1)

Products: Rtpproxy: Rtpproxy
Rtpproxy
1 product
Rtpproxy
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Rtpproxy
Up to 2.2

Related CWEs

CWE-200
Exposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (2)

Source: cve@mitre.org
Press/Media CoverageTechnical DescriptionThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Press/Media CoverageTechnical DescriptionThird Party Advisory

Timeline

No history available yet.