TLDR InfoSec · MISCELLANEOUS
A NOVEL DOS VULNERABILITY AFFECTING WEBRTC MEDIA SERVERS
Summary from the TLDR InfoSec newsletter
This article discusses a critical DoS vulnerability that was found in WebRTC media servers that affected real-time communication availability. The vulnerability stems from a race condition between ICE and DTLS traffic, allowing attackers to disrupt media sessions. Exploiting this vulnerability involves sending a DTLS ClientHello message with a null cipher suite to targeted UDP ports on the media server.