What is CVE-2017-14114?

CVE-2017-14114 is a medium-severity vulnerability in Rtpproxy, classified under Information Disclosure. CVSS score: 6.5/10. Published 2017-09-02.

How severe is CVE-2017-14114?

Medium severity. CVSS v3 base score is 6.5 out of 10.

Information disclosure in Rtpproxy

CVE-2017-14114

RTPproxy through 2.2.alpha.20160822 has a NAT feature that results in not properly determining the IP address and port number of the legitimate recipient of RTP traffic, which allows remote attackers to obtain sensitive information or cause a denial of service (communication outage) via crafted RTP packets.

Vulnerability class: Information Disclosure

EPSS: 0.012 (66.2th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L.

Affected products

Rtpproxy
N/a — versions n/a

Weakness classification (CWE)

CWE-200 — Information Disclosure

References

cve@mitre.org (Technical Description, Third Party Advisory, x_refsource_MISC, Press/Media Coverage)

Frequently asked questions

What is CVE-2017-14114?: CVE-2017-14114 is a medium-severity vulnerability in Rtpproxy, classified under Information Disclosure. CVSS score: 6.5/10. Published 2017-09-02.
How severe is CVE-2017-14114?: Medium severity. CVSS v3 base score is 6.5 out of 10.