GHSA-4xgv-j62q-h3rj
Suggest an improvement- Source
- https://github.com/advisories/GHSA-4xgv-j62q-h3rj
- Import Source
- https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2023/02/GHSA-4xgv-j62q-h3rj/GHSA-4xgv-j62q-h3rj.json
- JSON Data
- https://api.osv.dev/v1/vulns/GHSA-4xgv-j62q-h3rj
- Aliases
- Published
- 2023-02-07T18:36:47Z
- Modified
- 2023-11-08T04:15:24Z
- Severity
-
- 5.9 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
- Summary
- Panic during unmarshal of Hello Verify Request in github.com/pion/dtls/v2
- Details
-
Impact
During the unmarshalling of a hello verify request we could try to unmarshal into too small a buffer. is could result in a panic leading the program to crash.
This issue could be abused to cause a denial of service.
Workaround
None, upgrade to 2.2.4
- Database specific
{ "cwe_ids": [], "github_reviewed": true, "github_reviewed_at": "2023-02-07T18:36:47Z", "nvd_published_at": null, "severity": "MODERATE" }- References
Affected packages
Go / github.com/pion/dtls
Package
- Name
- github.com/pion/dtls
- View open source insights on deps.dev
- Purl
- pkg:golang/github.com/pion/dtls
Go / github.com/pion/dtls/v2
Package
- Name
- github.com/pion/dtls/v2
- View open source insights on deps.dev
- Purl
- pkg:golang/github.com/pion/dtls/v2