CVE-2017-5388: High severity firefox vulnerability
A STUN server in conjunction with a large number of "webkitRTCPeerConnection" objects can be used to send large STUN packets in a short period of time due to a lack of rate limiting being applied on e10s systems, allowing for a denial of service attack. This vulnerability affects Firefox < 51.
Other sources
A STUN server in conjunction with a large number of webkitRTCPeerConnection objects can be used to send large STUN packets in a short period of time due to a lack of rate limiting being applied on e10s systems, allowing for a denial of service attack.
Affected Software
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
- CVE-2017-5375
- CVE-2017-5376
- CVE-2017-5377
- CVE-2017-5378
- CVE-2017-5379
- CVE-2017-5380
- CVE-2017-5390
- CVE-2017-5389
- CVE-2017-5396
- CVE-2017-5381
- CVE-2017-5382
- CVE-2017-5383
- CVE-2017-5384
- CVE-2017-5385
- CVE-2017-5386
- CVE-2017-5394
- CVE-2017-5391
- CVE-2017-5392
- CVE-2017-5393
- CVE-2017-5395
- CVE-2017-5387
- CVE-2017-5388
- CVE-2017-5374
- CVE-2017-5373
Frequently Asked Questions
What is the severity of CVE-2017-5388?
CVE-2017-5388 has a severity rating of high due to its potential to cause a denial of service attack.
How do I fix CVE-2017-5388?
To fix CVE-2017-5388, upgrade Firefox to version 51 or newer.
What systems are affected by CVE-2017-5388?
CVE-2017-5388 affects Firefox versions prior to 51, particularly on e10s systems.
What type of attack does CVE-2017-5388 allow?
CVE-2017-5388 allows for a denial of service attack by exploiting a lack of rate limiting.
Is there a workaround for CVE-2017-5388?
There is no specific workaround for CVE-2017-5388 other than upgrading the affected software.