API Build-data JSON Resources
Theme

Choose how MSRBot.io looks on this device.

Auto (match system) Light mode Dark mode

Preference is stored in this browser only.

IETF RFC 5393
[ACTIVE]

Addressing an Amplification Vulnerability in Session Initiation Protocol (SIP) Forking Proxies

Metadata

Publisher
IETF
Doc Type
Standard
Pages
20
Abstract
This document normatively updates RFC 3261, the Session Initiation Protocol (SIP), to address a security vulnerability identified in SIP proxy behavior. This vulnerability enables an attack against SIP networks where a small number of legitimate, even authorized, SIP requests can stimulate massive amounts of proxy-to-proxy traffic. This document strengthens loop-detection requirements on SIP proxies when they fork requests (that is, forward a request to more than one destination). It also corrects and clarifies the description of the loop-detection algorithm such proxies are required to implement. Additionally, this document defines a Max-Breadth mechanism for limiting the number of concurrent branches pursued for any given request. [STANDARDS-TRACK]
Publication Date
2008-12-01
Status Note
Proposed Standard
DOI
10.17487/RFC5393
Link
https://doi.org/10.17487/RFC5393
Author(s)
Robert Sparks
Scott Lawrence
Alan Hawrylyshen
Byron Campen
Keyword(s)
SIP, Application, Multimedia, Multicast, Unicast
Latest version of IETF RFC 5393

Document Versions — IETF RFC 5393

  • ▶ IETF RFC 5393 (2008-12-01)
    THIS DOC [ACTIVE] [LATEST VERSION]

Normative Reference(s)

Bibliographic Reference(s)

  • Jennings, C. and R. Mahy, "Managing Client Initiated Connections in the Session Initiation Protocol (SIP)", Work in Progress, October 2008. EXTERNAL
  • Rosenberg, J., "Requirements for Management of Overload in the Session Initiation Protocol", Work in Progress, July 2008. EXTERNAL
  • Hilt, V., "Design Considerations for Session Initiation Protocol (SIP) Overload Control", Work in Progress, July 2008. EXTERNAL
  • IETF RFC 1321 [Active*]
  • IETF RFC 2543 [Superseded*]
  • IETF RFC 4960 [Superseded*]
Source Data (JSON)

Full registry record with provenance metadata. Open directly: /api/doc/RFC5393.json

Reference Tree

Explore all references and references to this document, as a navigable tree.

Open Reference Tree
Reference this Doc

Plain text (ISO 690 compliant)

Preview:
IETF RFC 5393, Addressing an Amplification Vulnerability in Session Initiation Protocol (SIP) Forking Proxies. Available at https://doi.org/10.17487/RFC5393
Snippet:
IETF RFC 5393, Addressing an Amplification Vulnerability in Session Initiation Protocol (SIP) Forking Proxies. Available at https://doi.org/10.17487/RFC5393

HTML (ISO 690 compliant)

Preview:
IETF RFC 5393, Addressing an Amplification Vulnerability in Session Initiation Protocol (SIP) Forking Proxies. Available at https://doi.org/10.17487/RFC5393
Snippet:
<span class="citation"><cite>IETF RFC 5393</cite>, Addressing an Amplification Vulnerability in Session Initiation Protocol (SIP) Forking Proxies. Available at <a href="https://doi.org/10.17487/RFC5393" target="_blank" rel="noopener">https://doi.org/10.17487/RFC5393</a></span>

SMPTE Icon SMPTE's HTML Pub

Preview:
IETF RFC 5393, Addressing an Amplification Vulnerability in Session Initiation Protocol (SIP) Forking Proxies
doi: 10.17487/RFC5393
url: https://doi.org/10.17487/RFC5393
Snippet:
<li>
<cite id="bib-rfc5393">IETF RFC 5393</cite>, Addressing an Amplification Vulnerability in Session Initiation Protocol (SIP) Forking Proxies
<span class="doi">10.17487/RFC5393</span>
</li>

Referenced By