CVE-2026-62309 CoreDNS: proxyproto plugin panics on PPv2 datagram with non-UDP transport — single 28-byte packet remote DoS

CoreDNS is a DNS server written in Go. Prior to 1.14.4, a single 28-byte UDP datagram can crash the CoreDNS process when the proxyproto plugin is enabled because plugin/pkg/proxyproto/proxyproto.go PacketConn.ReadFrom handles a PROXY v2 header with non-UDP transport such as family byte 0x11,...

DEBIAN-CVE-2023-38703

PJSIP is a free and open source multimedia communication library written in C with high level API in C, C++, Java, C, and Python languages. SRTP is a higher level media transport which is stacked upon a lower level media transport such as UDP and ICE. Currently a higher level transport is not...

PT-2023-26568 · Pjsip +2 · Pjsip +2

Name of the Vulnerable Software and Affected Versions: PJSIP affected versions not specified Description: The issue affects applications that have SRTP capability PJMEDIA HAS SRTP is set and use underlying media transport other than UDP. A higher level transport is not synchronized with its lower...