Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:35640
HistoryMay 23, 2022 - 5:13 a.m.

Denial Of Service (DoS)

2022-05-2305:13:26
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
denial of service
vulnerability
github.com/pion/dtls
fragment buffer
crash

EPSS

0.001

Percentile

46.6%

github.com/pion/dtls is vulnerable to denial of service. The vulnerability exists because the pop function of fragment_buffer.go does not properly check the length of the fragments buffer, allowing an attacker to crash the application through the infinite loop by providing zero-length fragments.

EPSS

0.001

Percentile

46.6%