Lucene search
+L

8 matches found

Snyk
Snyk
added 2026/07/01 9:19 p.m.6 views

Out-of-bounds Read

Overview github.com/pion/dtls is a DTLS 1.2 Server/Client implementation for Go. Affected versions of this package are vulnerable to Out-of-bounds Read through the ServerKeyExchange message parsing process. An attacker can cause a panic in the application by sending a specially crafted ECDHEPSK...

6.3CVSS6AI score0.0032EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/07/01 9:19 p.m.5 views

Out-of-bounds Read

Overview Affected versions of this package are vulnerable to Out-of-bounds Read through the ServerKeyExchange message parsing process. An attacker can cause a panic in the application by sending a specially crafted ECDHEPSK ServerKeyExchange message. Remediation There is no fixed version for...

6.3CVSS6AI score0.0032EPSS
SaveExploits0References2
NVD
NVD
added 2026/07/01 8:17 p.m.10 views

CVE-2026-54908

Pion DTLS is a Go implementation of Datagram Transport Layer Security. Versions prior to 3.1.4 are vulnerable to Remote Denial of Service via panic while parsing a crafted ECDHEPSK ServerKeyExchange message. This issue has been fixed in version 3.1.4...

6.3CVSS0.0032EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2026/07/01 8:17 p.m.10 views

CVE-2026-54908

Pion DTLS is a Go implementation of Datagram Transport Layer Security. Versions prior to 3.1.4 are vulnerable to Remote Denial of Service via panic while parsing a crafted ECDHEPSK ServerKeyExchange message. This issue has been fixed in version 3.1.4...

6.3CVSS6.1AI score0.0032EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2026/07/01 7:34 p.m.9 views

CVE-2026-54908 Pion DTLS: Denial of service via panic while parsing a crafted ECDHE_PSK ServerKeyExchange message

Pion DTLS is a Go implementation of Datagram Transport Layer Security. Versions prior to 3.1.4 are vulnerable to Remote Denial of Service via panic while parsing a crafted ECDHEPSK ServerKeyExchange message. This issue has been fixed in version 3.1.4...

6.3CVSS5.8AI score0.0032EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/07/01 7:34 p.m.10 views

CVE-2026-54908

Pion DTLS is a Go implementation of Datagram Transport Layer Security. Versions prior to 3.1.4 are vulnerable to Remote Denial of Service via panic while parsing a crafted ECDHEPSK ServerKeyExchange message. This issue has been fixed in version 3.1.4...

6.3CVSS5.8AI score0.0032EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2026/07/01 7:34 p.m.8 views

CVE-2026-54908 Pion DTLS: Denial of service via panic while parsing a crafted ECDHE_PSK ServerKeyExchange message

Pion DTLS is a Go implementation of Datagram Transport Layer Security. Versions prior to 3.1.4 are vulnerable to Remote Denial of Service via panic while parsing a crafted ECDHEPSK ServerKeyExchange message. This issue has been fixed in version 3.1.4...

6.3CVSS5.9AI score0.0032EPSS
SaveExploits0References4
Debian CVE
Debian CVE
added 2026/07/01 7:34 p.m.9 views

CVE-2026-54908

Pion DTLS is a Go implementation of Datagram Transport Layer Security. Versions prior to 3.1.4 are vulnerable to Remote Denial of Service via panic while parsing a crafted ECDHEPSK ServerKeyExchange message. This issue has been fixed in version 3.1.4...

6.3CVSS5.8AI score0.0032EPSS
SaveExploits0
Rows per page
Query Builder