1. Home
  2. CVE Database
  3. CVE-2017-14114
MEDIUM · 6.5

CVE-2017-14114

RTPproxy through 2.2.alpha.20160822 has a NAT feature that results in not properly determining the IP address and port number of the legitimate recipient of RTP traffic, which allows remote attackers ...

Vulnerability Description

RTPproxy through 2.2.alpha.20160822 has a NAT feature that results in not properly determining the IP address and port number of the legitimate recipient of RTP traffic, which allows remote attackers to obtain sensitive information or cause a denial of service (communication outage) via crafted RTP packets.

CVSS Score

6.5

MEDIUM

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
LOW
Integrity
NONE
Availability
LOW

Affected Products

VendorProductVersions
RtpproxyRtpproxy<= 2.2

Related Weaknesses (CWE)

CWE-200

References

FAQ

What is CVE-2017-14114?

CVE-2017-14114 is a vulnerability with a CVSS score of 6.5 (MEDIUM). RTPproxy through 2.2.alpha.20160822 has a NAT feature that results in not properly determining the IP address and port number of the legitimate recipient of RTP traffic, which allows remote attackers ...

How severe is CVE-2017-14114?

CVE-2017-14114 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2017-14114?

Check the references section above for vendor advisories and patch information. Affected products include: Rtpproxy Rtpproxy.