]> git.ipfire.org Git - thirdparty/asterisk.git/commit
projects / thirdparty / asterisk.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 1c4d6d3) | patch
res_rtp_asterisk.c: Check DTLS packets against ICE candidate list
authorGeorge Joseph <gjoseph@sangoma.com>
Thu, 9 Nov 2023 16:14:03 +0000 (09:14 -0700)
committerMike Bradeen <mbradeen@sangoma.com>
Thu, 14 Dec 2023 19:01:47 +0000 (12:01 -0700)
commitbe5e9c568d9a08576f271b05ac92f990b999d493
treef912b8b37313993bc4980f3631db373845997920tree | snapshot
parent1c4d6d3af18ede08309b9b7916c1b412368ebc29commit | diff
res_rtp_asterisk.c: Check DTLS packets against ICE candidate list

When ICE is in use, we can prevent a possible DOS attack by allowing
DTLS protocol messages (client hello, etc) only from sources that
are in the active remote candidates list.

Resolves: GHSA-hxj9-xwr8-w8pq
res/res_rtp_asterisk.c diff | blob | blame | history
Mirror of https://github.com/asterisk/asterisk.git