Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2022-29190

Header reconstruction method can be thrown into an infinite loop in Pion DTLS

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
GitHub_M

Description

Pion DTLS is a Go implementation of Datagram Transport Layer Security. Prior to version 2.1.4, an attacker can send packets that sends Pion DTLS into an infinite loop when processing. Version 2.1.4 contains a patch for this issue. There are currently no known workarounds available.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

pion dtls

  • < 2.1.4affected

References