High · published December 25, 2025
⚡ A crafty signalling message is all it takes to trigger a software abort in Pexip Infinity before version 37.0! This means denial of service is just a remote attack away. 😱 Think of it like a restaurant where one overly spicy dish causes the entire kitchen to shut down — a single poorly crafted request leads to a complete service halt. 🍽️ This vulnerability could lead to serious disruptions, where attackers can remotely crash the service, making it completely unavailable. Users would be left without access, causing chaos for businesses relying on Pexip Infinity operationally. 🔥
Think of it like a restaurant where one overly spicy dish causes the entire kitchen to shut down — a single poorly crafted request leads to a complete service halt. 🍽️ This flaw arises from improper input validation in the signalling process, allowing attackers to send specially crafted messages that trigger a software abort. Consequently, the service becomes unusable, leading to a denial of service scenario.
This vulnerability could lead to serious disruptions, where attackers can remotely crash the service, making it completely unavailable. Users would be left without access, causing chaos for businesses relying on Pexip Infinity operationally. 🔥 To mitigate this risk, upgrade Pexip Infinity to version 37.0 or later immediately. Additionally, implement strict input validation checks to ensure that only expected and safe signalling messages are processed. 🛡️ You've got this! With a quick upgrade and improved validation, you'll keep your service running smoothly. 🚀
| Product | Versions | Fixed in |
|---|---|---|
| pexip/pexip_infinity | < 37.0 | 37.0 |