Skip to content
OpenAdvisories

Package · Debian

snowflake

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • Medium 5.9
    CVE-2022-29222

    Improper Certificate Validation in Pion DTLS

    Pion DTLS is a Go implementation of Datagram Transport Layer Security. Prior to version 2.1.5, a DTLS Client could provide a Certificate that it doesn't posses the private key for and Pion DTLS wouldn't reject it. This issue affects users that are using Clien…

    pion dtls github.com/pion/dtls github.com/pion/dtls/v2 Debian Ubuntu Go
  • Medium 5.3
    CVE-2022-29189

    Buffer for inbound DTLS fragments has no limit

    Pion DTLS is a Go implementation of Datagram Transport Layer Security. Prior to version 2.1.4, a buffer that was used for inbound network traffic had no upper limit. Pion DTLS would buffer all network traffic from the remote user until the handshake completes…

    pion dtls github.com/pion/dtls github.com/pion/dtls/v2 Debian Ubuntu Go
  • High 7.5
    CVE-2022-29190

    Header reconstruction method can be thrown into an infinite loop in Pion DTLS

    Pion DTLS is a Go implementation of Datagram Transport Layer Security. Prior to version 2.1.4, an attacker can send packets that sends Pion DTLS into an infinite loop when processing. Version 2.1.4 contains a patch for this issue. There are currently no known…

    pion dtls github.com/pion/dtls github.com/pion/dtls/v2 Debian Ubuntu Go