RFC5393 · Addressing an Amplification Vulnerability in Session Initiation Protocol (SIP) Forking Proxies

{
  "id": "RFC5393",
  "number": 5393,
  "title_en": "Addressing an Amplification Vulnerability in Session Initiation Protocol (SIP) Forking Proxies",
  "title_ru": "",
  "summary_ru": "",
  "purpose_ru": "",
  "use_ru": "",
  "full_translation_path": "",
  "full_translation_checked_at": "",
  "full_translation_source_sha256": "",
  "architect_note_ru": "",
  "topics_ru": [],
  "translation_state": "not_prepared",
  "verification_level": "not_prepared",
  "verification_level_ru": "Русская выжимка не подготовлена",
  "verification_note_ru": "",
  "abstract_en": "This document normatively updates RFC 3261, the Session Initiation Protocol (SIP), to address a security vulnerability identified in SIP proxy behavior. This vulnerability enables an attack against SIP networks where a small number of legitimate, even authorized, SIP requests can stimulate massive amounts of proxy-to-proxy traffic. This document strengthens loop-detection requirements on SIP proxies when they fork requests (that is, forward a request to more than one destination). It also corrects and clarifies the description of the loop-detection algorithm such proxies are required to implement. Additionally, this document defines a Max-Breadth mechanism for limiting the number of concurrent branches pursued for any given request. [STANDARDS-TRACK]",
  "authors": [
    "R. Sparks",
    "S. Lawrence",
    "A. Hawrylyshen",
    "B. Campen"
  ],
  "organizations": [],
  "publication_date": "2008-12-01",
  "current_status": "PROPOSED STANDARD",
  "current_status_ru": "Предлагаемый стандарт",
  "publication_status": "PROPOSED STANDARD",
  "publication_status_ru": "Предлагаемый стандарт",
  "lifecycle": "active",
  "lifecycle_ru": "Действующий",
  "stream": "IETF",
  "stream_ru": "IETF",
  "area": "rai",
  "area_ru": "rai",
  "working_group": "sip",
  "source_draft": "draft-ietf-sip-fork-loop-fix-08",
  "page_count": 20,
  "doi": "10.17487/RFC5393",
  "keywords": [
    "SIP",
    "application-layer",
    "application",
    "layer",
    "multimedia",
    "multicast",
    "unicast"
  ],
  "formats": [
    "TXT",
    "HTML"
  ],
  "relations": {
    "obsoletes": [],
    "obsoleted_by": [],
    "updates": [
      "RFC3261"
    ],
    "updated_by": [],
    "is_also": [],
    "see_also": []
  },
  "links": {
    "info": "https://www.rfc-editor.org/info/rfc5393/",
    "html": "https://www.rfc-editor.org/rfc/rfc5393.html",
    "txt": "https://www.rfc-editor.org/rfc/rfc5393.txt",
    "datatracker": "https://datatracker.ietf.org/doc/rfc5393/"
  }
}