]> git.ipfire.org Git - thirdparty/asterisk.git/commit
projects / thirdparty / asterisk.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: d44f072) | patch
res_rtp_asterisk.c: Check DTLS packets against ICE candidate list
authorGeorge Joseph <gjoseph@sangoma.com>
Thu, 9 Nov 2023 16:14:03 +0000 (09:14 -0700)
committerMike Bradeen <mbradeen@sangoma.com>
Thu, 14 Dec 2023 19:00:29 +0000 (12:00 -0700)
commite46cc258abec72c592c8287d3ae64774e67f1072
tree82f7b8be067152b1d17cdd75a214d04e412c95dctree | snapshot
parentd44f07244a408f9e86197bc03638d7d1f7d3defdcommit | diff
res_rtp_asterisk.c: Check DTLS packets against ICE candidate list

When ICE is in use, we can prevent a possible DOS attack by allowing
DTLS protocol messages (client hello, etc) only from sources that
are in the active remote candidates list.

Resolves: GHSA-hxj9-xwr8-w8pq
res/res_rtp_asterisk.c diff | blob | blame | history
Mirror of https://github.com/asterisk/asterisk.git