Lucene search

K
ubuntucveUbuntu.comUB:CVE-2017-14114
HistorySep 02, 2017 - 12:00 a.m.

CVE-2017-14114

2017-09-0200:00:00
ubuntu.com
ubuntu.com
12

CVSS2

6.4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:N/A:P

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L

EPSS

0.002

Percentile

55.6%

RTPproxy through 2.2.alpha.20160822 has a NAT feature that results in not
properly determining the IP address and port number of the legitimate
recipient of RTP traffic, which allows remote attackers to obtain sensitive
information or cause a denial of service (communication outage) via crafted
RTP packets.

Bugs

CVSS2

6.4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:N/A:P

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L

EPSS

0.002

Percentile

55.6%

Related for UB:CVE-2017-14114