Lucene search
GoogleOSV:GHSA-CM8F-H6J3-P25CHistoryMay 24, 2022 - 10:05 p.m.
Pion DTLS Header reconstruction method can be thrown into an infinite loop
2022-05-2422:05:00
Google
osv.dev
11
pion dtls
header reconstruction
infinite loop
security advisory
patch
upgrade
vulnerability
EPSS
0.001
Percentile
46.6%
Impact
An attacker can send packets that will send Pion DTLS into an infinite loop when processing.
Patches
Upgrade to Pion DTLS v2.1.4
Workarounds
No workarounds available, upgrade to Pion DTLS v2.1.4
References
Thank you to Juho Nurminen and the Mattermost team for discovering and reporting this.
For more information
If you have any questions or comments about this advisory:
- Open an issue in Pion DTLS
- Email us at [email protected]
Related
osv
osv
Infinite loop in github.com/pion/dtls/v2
2022-07-01 20:07:34
CVE-2022-29190
2022-05-21 00:15:11
veracode
veracode
Denial Of Service (DoS)
2022-05-23 05:13:26
prion
prion
Code injection
2022-05-21 00:15:00
ubuntucve
ubuntucve
CVE-2022-29190
2022-05-21 00:00:00
github
github
Pion DTLS Header reconstruction method can be thrown into an infinite loop
2022-05-24 22:05:00
debiancve
debiancve
CVE-2022-29190
2022-05-21 00:15:11
cvelist
cvelist
nvd
nvd
CVE-2022-29190
2022-05-21 00:15:11
cve
cve
CVE-2022-29190
2022-05-21 00:15:11