CVE-2022-23228: Input Validation
Published Feb 18, 2022
·Updated
Pexip Infinity before 27.0 has improper WebRTC input validation. An unauthenticated remote attacker can use excessive resources, temporarily causing denial of service.
Affected Software
1 affected component
Pexip Pexip Infinity>=1.0<27.0
Event History
Feb 18, 2022
CVE Published
via MITRE·09:50 PM
Data Sourced
via MITRE·09:50 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2022-23228?
CVE-2022-23228 is classified as a denial of service vulnerability.
2
How do I fix CVE-2022-23228?
To mitigate CVE-2022-23228, upgrade to Pexip Infinity version 27.0 or later.
3
What are the main risks associated with CVE-2022-23228?
The main risk is that an unauthenticated remote attacker can exploit this vulnerability to exhaust system resources, leading to service disruption.
4
Which versions of Pexip Infinity are affected by CVE-2022-23228?
Pexip Infinity versions from 1.0 up to, but not including, 27.0 are affected by CVE-2022-23228.
5
Is authentication required to exploit CVE-2022-23228?
No, CVE-2022-23228 can be exploited by unauthenticated attackers.