Security Advisory

CVE-2017-5388

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2018-06-11 21:00:00

Last updated 2024-08-05 14:55:35

Assigner mozilla

CVSS score not scored

State PUBLISHED

Description

A STUN server in conjunction with a large number of "webkitRTCPeerConnection" objects can be used to send large STUN packets in a short period of time due to a lack of rate limiting being applied on e10s systems, allowing for a denial of service attack. This vulnerability affects Firefox < 51.

← Browse all CVEs View on cve.org ↗