Lucene search

K
osvGoogleOSV:CVE-2022-29189
HistoryMay 21, 2022 - 12:15 a.m.

CVE-2022-29189

2022-05-2100:15:11
Google
osv.dev
4
pion dtls
version 2.1.4
excessive memory usage

AI Score

6.9

Confidence

High

EPSS

0.004

Percentile

74.6%

Pion DTLS is a Go implementation of Datagram Transport Layer Security. Prior to version 2.1.4, a buffer that was used for inbound network traffic had no upper limit. Pion DTLS would buffer all network traffic from the remote user until the handshake completes or timed out. An attacker could exploit this to cause excessive memory usage. Version 2.1.4 contains a patch for this issue. There are currently no known workarounds available.

AI Score

6.9

Confidence

High

EPSS

0.004

Percentile

74.6%