CVE-2017-14099

CVE-2017-14099 is a high-severity unauthorized data disclosure vulnerability affecting Asterisk 11.x, 13.x, 14.x, and Certified Asterisk 11.x and 13.x. An attacker can exploit a timing vulnerability in the RTP stack, specifically when "strictrtp" and symmetric RTP options are enabled, to hijack media streams. This allows an unauthenticated attacker to remotely intercept and redirect media traffic, resulting in a high impact on confidentiality. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this vulnerability.