Pexip Infinity Denial-of-Service Vulnerability via Improper Input Validation in Signaling

A denial-of-service vulnerability has been identified in Pexip Infinity versions 33.0 through 37.0 prior to 37.1. The issue arises from improper input validation in the signaling implementation, which allows an attacker to trigger a software abort, causing a temporary denial of service. Exploitation involves sending a crafted signaling message that interrupts normal application processing.

Impact

Exploitation of this vulnerability leads to a software abort, causing a temporary denial-of-service condition on the affected system.

Remediation

Users can upgrade to Pexip Infinity version 37.1 to address this vulnerability.