CVE-2017-14114

RTPproxy through 2.2.alpha.20160822 has a NAT feature that results in not properly determining the IP address and port number of the legitimate recipient of RTP traffic, which allows remote attackers to obtain sensitive information or cause a denial of service (communication outage) via crafted RTP packets.

• CWE-200

• https://rtpbleed.comPress/Media Coverage, Technical Description, Third Party Advisory
• https://rtpbleed.comPress/Media Coverage, Technical Description, Third Party Advisory

Published

Sep 2, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-14106The tcp_disconnect function in net/ipv4/tcp.c in the Linux k…
• CVE-2017-14107The _zip_read_eocd64 function in zip_open.c in libzip before…6.5
• CVE-2017-14108libgedit.a in GNOME gedit through 3.22.1 allows remote attac…
• CVE-2017-1411IBM Security Identity Governance Virtual Appliance 5.2 throu…5.9
• CVE-2017-14111The workstation logging function in Philips IntelliSpace Car…
• CVE-2017-14113Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2017-14115The AT&T U-verse 9.2.2h0d83 firmware for the Arris NVG589 an…
• CVE-2017-14116The AT&T U-verse 9.2.2h0d83 firmware for the Arris NVG599 de…
• CVE-2017-14117The AT&T U-verse 9.2.2h0d83 firmware for the Arris NVG589 an…
• CVE-2017-14118In the EyesOfNetwork web interface (aka eonweb) 5.1-0, modul…
• CVE-2017-14119In the EyesOfNetwork web interface (aka eonweb) 5.1-0, modul…
• CVE-2017-1412IBM Security Identity Governance Virtual Appliance 5.2 throu…4.3