CVE-2024-37917

CVSS 3.1 Score 7.5 of 10 (high)

Details

Published Apr 2, 2025
Updated: Apr 7, 2025
CWE ID 20

Summary

CVE-2024-37917 is a denial-of-service vulnerability affecting Pexip Infinity versions prior to 35.0. This issue stems from improper input validation, allowing remote attackers to craft signalling messages that trigger a software abort and cause a denial-of-service condition. The vulnerability poses a significant risk, as successful exploitation can lead to service disruption, impacting the availability of communication channels for users. It is crucial for organizations using Pexip Infinity to update to the latest version or implement mitigations to protect against this threat.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share