Closed Bug 2028200 Opened 7 months ago Closed 7 months ago

FF-VPN needs to set media.peerconnection.ice.relay_only

Categories

(Firefox :: IP Protection, defect)

Product:
Firefox
Component:
IP Protection
Version:
Firefox 150
Platform:
Desktop
All
Type:
defect

Tracking

()

Status:
RESOLVED DUPLICATE of bug 2026571
Tracking Flags:
Tracking Status
firefox-esr115 --- unaffected
firefox-esr140 --- unaffected
firefox149 --- unaffected
firefox150 --- affected

People

(Reporter: sstreich, Assigned: sstreich)

References

Details

(Whiteboard: [fx-vpn])

From Fastly:

The WebRTC leak.  https://browserleaks.com/webrtc (and https://dnscheck.tools/) know my real public IP address even though I am using the built-in VPN.  Max pointed me to the setting media.peerconnection.ice.relay_only which when set to true appears to plug this leak, but in its default configuration the builtin VPN is vulnerable to the WebRTC leak.

Assignee: nobody → sstreich
status-firefox149: --- → unaffected
status-firefox150: --- → affected
status-firefox-esr115: --- → unaffected
status-firefox-esr140: --- → unaffected
OS: Unspecified → All
Hardware: Unspecified → Desktop
Whiteboard: [fx-vpn]

Isn't this a dupe of bug 2026571?

Flags: needinfo?(sstreich)

I havent seen that yet! Jep it is.

Status: NEW → RESOLVED
Closed: 7 months ago
Duplicate of bug: CVE-2026-6782
Flags: needinfo?(sstreich)
Resolution: --- → DUPLICATE

Gijs or Basti, mind adding me to bug 2026571 please?

Flags: needinfo?(gijskruitbosch+bugs)

(In reply to Lesley Norton [:lnorton] from comment #3)

Gijs or Basti, mind adding me to bug 2026571 please?

Done, sorry.

Flags: needinfo?(gijskruitbosch+bugs)

nw, thank you!

Group: firefox-core-security
You need to log in before you can comment on or make changes to this bug.