Pion DTLS is a Go implementation of Datagram Transport Layer Security. Prior to version 2.1.4, an attacker can send packets that sends Pion DTLS into an infinite loop when processing. Version 2.1.4 contains a patch for this issue. There are currently no known workarounds available.
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| github.com/pion/dtls(Go) | 0 | 2.1.4 | N/A |
| github.com/pion/dtls/v2(Go) | 0 | 2.1.4 | N/A |
CVSS Metrics
