tocsin

Debian/rtpengine: unknown

In Sipwise rtpengine before 13.4.1.1, an origin-validation error in the endpoint-learning logic of the media-relay core allows remote attackers to inject or intercept RTP/SRTP media streams via RTP pa

Action: Upgrade rtpengine to 10.5.3.5-1+deb12u1 or later.

Affected

introducedfixedlast affected
010.5.3.5-1+deb12u1-

Fixed versions

10.5.3.5-1+deb12u1

Sources

published · modified · JSON