TLDR InfoSec · MISCELLANEOUS

A NOVEL DOS VULNERABILITY AFFECTING WEBRTC MEDIA SERVERS

rtcsec.com11 min read

Summary from the TLDR InfoSec newsletter

This article discusses a critical DoS vulnerability that was found in WebRTC media servers that affected real-time communication availability. The vulnerability stems from a race condition between ICE and DTLS traffic, allowing attackers to disrupt media sessions. Exploiting this vulnerability involves sending a DTLS ClientHello message with a null cipher suite to targeted UDP ports on the media server.