Skip to content
OpenAdvisories

Package · Go

github.com/pion/dtls

7 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2019-20786

    Improper Authenication in Pion DTLS

    handleIncomingPacket in conn.go in Pion DTLS before 1.5.2 lacks a check for application data with epoch 0, which allows remote attackers to inject arbitrary unencrypted data after handshake completion.

    github.com/pion/dtls Go