Skip to content
OpenAdvisories

Vendor

pion

7 known vulnerabilities.

2 results · Clear filters · Feed

  • High 7.5

    Pion Interceptor's improper RTP padding handling allows remote crash for SFU users (DoS)

    Pion Interceptor is a framework for building RTP/RTCP communication software. Versions v0.1.36 through v0.1.38 contain a bug in a RTP packet factory that can be exploited to trigger a panic with Pion based SFU via crafted RTP packets, This only affect users t…

  • High 7.5

    Header reconstruction method can be thrown into an infinite loop in Pion DTLS

    Pion DTLS is a Go implementation of Datagram Transport Layer Security. Prior to version 2.1.4, an attacker can send packets that sends Pion DTLS into an infinite loop when processing. Version 2.1.4 contains a patch for this issue. There are currently no known…