OWASPASVS 5.0 requirement
ASVS-V17.2.6 The media server is not susceptible to the "clienthello" race condition vulnerability in datagram transport layer security (dtls) by…
- Standard
- OWASP ASVS 5.0
- Chapter
- V17 WebRTC
- Section
- V17.2 Media
- Level
- L3 (requirement applies from this verification level up)
Requirement
Verify that the media server is not susceptible to the "ClientHello" Race Condition vulnerability in Datagram Transport Layer Security (DTLS) by checking if the media server is publicly known to be vulnerable or by performing the race condition test.