Lucene search
+L

152 matches found

CVE
CVE
added 2026/02/11 9:7 p.m.56 views

CVE-2026-26014

Pion DTLS (Go) vulnerability CVE-2026-26014 affects versions v1.0.0–v3.1.0 due to improper nonce generation with AES-GCM ciphers, enabling nonce reuse in a session. This can let remote attackers obtain the authentication key and spoof data. Remedy: upgrade to v3.1.0 or later. The provided documen...

5.9CVSS5.6AI score0.00619EPSS
SaveExploits0References6Affected Software1
Cvelist
Cvelist
added 2026/02/11 9:7 p.m.65 views

CVE-2026-26014 Pion DTLS uses random nonce generation with AES GCM ciphers risks leaking the authentication key

Pion DTLS is a Go implementation of Datagram Transport Layer Security. Pion DTLS versions v1.0.0 through v3.0.10 and 3.1.0 use random nonce generation with AES GCM ciphers, which makes it easier for remote attackers to obtain the authentication key and spoof data by leveraging the reuse of a nonc...

5.9CVSS0.00619EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
added 2026/02/11 9:7 p.m.7 views

CVE-2026-26014 Pion DTLS uses random nonce generation with AES GCM ciphers risks leaking the authentication key

Pion DTLS is a Go implementation of Datagram Transport Layer Security. Pion DTLS versions v1.0.0 through v3.1.0 use random nonce generation with AES GCM ciphers, which makes it easier for remote attackers to obtain the authentication key and spoof data by leveraging the reuse of a nonce in a...

5.9CVSS5.6AI score0.00619EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2026/02/11 9:7 p.m.6 views

CVE-2026-26014

Pion DTLS is a Go implementation of Datagram Transport Layer Security. Pion DTLS versions v1.0.0 through v3.0.10 and 3.1.0 use random nonce generation with AES GCM ciphers, which makes it easier for remote attackers to obtain the authentication key and spoof data by leveraging the reuse of a nonc...

5.9CVSS5.6AI score0.00619EPSS
SaveExploits0References8Affected Software1
OSV
OSV
added 2026/02/11 9:7 p.m.9 views

CVE-2026-26014 Pion DTLS uses random nonce generation with AES GCM ciphers risks leaking the authentication key

Pion DTLS is a Go implementation of Datagram Transport Layer Security. Pion DTLS versions v1.0.0 through v3.0.10 and 3.1.0 use random nonce generation with AES GCM ciphers, which makes it easier for remote attackers to obtain the authentication key and spoof data by leveraging the reuse of a nonc...

5.9CVSS5.6AI score
SaveExploits0References8
Snyk
Snyk
added 2026/02/11 3:13 p.m.8 views

Inadequate Encryption Strength

Overview Affected versions of this package are vulnerable to Inadequate Encryption Strength due to the use of the random nonce generation with AES GCM ciphers. An attacker can obtain the authentication key and spoof data by exploiting nonce reuse within a session. Remediation There is no fixed...

8.2CVSS5.7AI score0.00619EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
added 2026/02/11 3:13 p.m.13 views

Pion DTLS's usage of random nonce generation with AES GCM ciphers risks leaking the authentication key

Impact Pion DTLS versions v1.0.0 through v3.0.10 use random nonce generation with AES GCM ciphers, which makes it easier for remote attackers to obtain the authentication key and spoof data by leveraging the reuse of a nonce in a session and a "forbidden attack". Patches Upgrade to v3.1.1 or late...

5.9CVSS5.6AI score0.00619EPSS
SaveExploits0References8Affected Software3
Positive Technologies
Positive Technologies
added 2026/02/11 12:0 a.m.11 views

PT-2026-7719

Name of the Vulnerable Software and Affected Versions Pion DTLS versions 1.0.0 through 3.1.0 Description Pion DTLS, a Go implementation of Datagram Transport Layer Security, is susceptible to an issue where the use of random nonce generation with AES GCM ciphers allows remote attackers to...

9.1CVSS5.5AI score0.00619EPSS
SaveExploits0
CNNVD
CNNVD
added 2026/02/11 12:0 a.m.15 views

Pion DTLS 信息泄露漏洞

Pion DTLS is an open-source implementation of the DTLS Data Transfer Layer Security Protocol based on the Go language. Versions of Pion DTLS from 1.0.0 to 3.1.0 have a vulnerability related to information leakage. This vulnerability stems from the use of random numbers for AES GCM encryption, whi...

5.9CVSS5.9AI score0.00619EPSS
SaveExploits0References7
Tenable Nessus
Tenable Nessus
added 2026/01/20 12:0 a.m.4 views

Ubuntu 22.04 LTS : Snowflake vulnerabilities (USN-7966-1)

The remote Ubuntu 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7966-1 advisory. It was discovered that Pion DTLS, vendored in Snowflake, did not impose a limit on the amount of data that was buffered during the handshake. An attacker...

7.5CVSS5.8AI score0.02066EPSS
SaveExploits0References4
OpenVAS
OpenVAS
added 2026/01/20 12:0 a.m.6 views

Ubuntu: Security Advisory (USN-7966-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS5.5AI score0.02066EPSS
SaveExploits0References2
Ubuntu
Ubuntu
added 2026/01/19 12:42 p.m.21 views

USN-7966-2: Telegraf vulnerabilities

USN-7966-1 fixed vulnerabilities in Snowflake. This update provides the corresponding updates for Telegraf. Original advisory details: It was discovered that Pion DTLS, vendored in Telegraf, did not impose a limit on the amount of data that was buffered during the handshake. An attacker could...

7.5CVSS6.6AI score0.02066EPSS
SaveExploits0
Ubuntu
Ubuntu
added 2026/01/19 10:35 a.m.11 views

USN-7966-1: Snowflake vulnerabilities

It was discovered that Pion DTLS, vendored in Snowflake, did not impose a limit on the amount of data that was buffered during the handshake. An attacker could possibly use the issue to cause a denial of service. CVE-2022-29189 It was discovered that Pion DTLS, vendored in Snowflake, did not...

7.5CVSS6.5AI score0.02066EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2026/01/09 11:25 a.m.17 views

CVE-2021-28681

Pion WebRTC before 3.0.15 didn't properly tear down the DTLS Connection when certificate verification failed. The PeerConnectionState was set to failed, but a user could ignore that and continue to use the PeerConnection. A WebRTC implementation shouldn't allow the user to continue if verificatio...

5.3CVSS6.7AI score0.00677EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2026/01/09 10:8 a.m.14 views

CVE-2019-20786

handleIncomingPacket in conn.go in Pion DTLS before 1.5.2 lacks a check for application data with epoch 0, which allows remote attackers to inject arbitrary unencrypted data after handshake completion...

9.8CVSS7AI score0.02938EPSS
SaveExploits1References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2021-0985

Malware in sbrugna...

5.3CVSS5.3AI score0.00677EPSS
SaveExploits1References8
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2021-1278

Malware in sbrugna...

9.8CVSS9.3AI score0.02938EPSS
SaveExploits1References9
EUVD
EUVD
added 2025/10/03 8:7 p.m.10 views

EUVD-2022-5491

Malicious code in bioql PyPI...

7.5CVSS7.5AI score0.00792EPSS
SaveExploits0References6
EUVD
EUVD
added 2025/10/03 8:7 p.m.10 views

EUVD-2022-3660

Malicious code in bioql PyPI...

5.3CVSS5.4AI score0.02066EPSS
SaveExploits0References6
EUVD
EUVD
added 2025/10/03 8:7 p.m.10 views

EUVD-2022-3593

Malicious code in bioql PyPI...

7.5CVSS7.5AI score0.01676EPSS
SaveExploits0References6
Rows per page
Query Builder