fkie_cve-2025-49140
Vulnerability from fkie_nvd
Published
2025-06-09 22:15
Modified
2025-06-12 16:06
Severity ?
Summary
Pion Interceptor is a framework for building RTP/RTCP communication software. Versions v0.1.36 through v0.1.38 contain a bug in a RTP packet factory that can be exploited to trigger a panic with Pion based SFU via crafted RTP packets, This only affect users that use pion/interceptor. Users should upgrade to v0.1.39 or later, which validates that: `padLen > 0 && padLen <= payloadLength` and return error on overflow, avoiding panic. If upgrading is not possible, apply the patch from the pull request manually or drop packets whose P-bit is set but whose padLen is zero or larger than the remaining payload.
References
Impacted products
Vendor | Product | Version |
---|
{ "cveTags": [], "descriptions": [ { "lang": "en", "value": "Pion Interceptor is a framework for building RTP/RTCP communication software. Versions v0.1.36 through v0.1.38 contain a bug in a RTP packet factory that can be exploited to trigger a panic with Pion based SFU via crafted RTP packets, This only affect users that use pion/interceptor. Users should upgrade to v0.1.39 or later, which validates that: `padLen \u003e 0 \u0026\u0026 padLen \u003c= payloadLength` and return error on overflow, avoiding panic. If upgrading is not possible, apply the patch from the pull request manually or drop packets whose P-bit is set but whose padLen is zero or larger than the remaining payload." }, { "lang": "es", "value": "Pion Interceptor es un framework para crear software de comunicaci\u00f3n RTP/RTCP. Las versiones v0.1.36 a v0.1.38 contienen un error en una f\u00e1brica de paquetes RTP que puede explotarse para generar un p\u00e1nico con SFU basado en Pion mediante paquetes RTP manipulados. Esto solo afecta a los usuarios que usan pion/interceptor. Los usuarios deben actualizar a la versi\u00f3n v0.1.39 o posterior, que valida que `padLen \u0026gt; 0 \u0026amp;\u0026amp; padLen \u0026lt;= payloadLength` y devuelve un error en caso de desbordamiento, evitando as\u00ed el p\u00e1nico. Si no es posible actualizar, aplique el parche desde la solicitud de extracci\u00f3n manualmente o descarte los paquetes cuyo bit P est\u00e9 configurado, pero cuyo padLen sea cero o mayor que la carga \u00fatil restante." } ], "id": "CVE-2025-49140", "lastModified": "2025-06-12T16:06:47.857", "metrics": { "cvssMetricV31": [ { "cvssData": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "security-advisories@github.com", "type": "Secondary" } ] }, "published": "2025-06-09T22:15:22.153", "references": [ { "source": "security-advisories@github.com", "url": "https://github.com/pion/interceptor/commit/fa5b35ea867389cec33a9c82fffbd459ca8958e5" }, { "source": "security-advisories@github.com", "url": "https://github.com/pion/interceptor/pull/338" }, { "source": "security-advisories@github.com", "url": "https://github.com/pion/interceptor/security/advisories/GHSA-f26w-gh5m-qq77" }, { "source": "security-advisories@github.com", "url": "https://github.com/pion/webrtc/issues/3148" } ], "sourceIdentifier": "security-advisories@github.com", "vulnStatus": "Awaiting Analysis", "weaknesses": [ { "description": [ { "lang": "en", "value": "CWE-770" } ], "source": "security-advisories@github.com", "type": "Primary" } ] }
Loading…
Loading…
Sightings
Author | Source | Type | Date |
---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.
Loading…
Loading…