dtls vulnerabilities

2 known vulnerabilities in dtls from Pion. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  dtls: Improper Certificate Validation

  CVE-2022-29222May 21, 2022Pion

  Pion DTLS is a Go implementation of Datagram Transport Layer Security. Prior to version 2.1.5, a DTLS Client could provide a Certificate that it doesn't posses the private key for and Pion DTLS wouldn't reject it. This issue affects users that are using Client

• 7.5 High severity

  dtls: Loop with Unreachable Exit Condition

  CVE-2022-29190May 21, 2022PionEPSS 1.74%

  Pion DTLS is a Go implementation of Datagram Transport Layer Security. Prior to version 2.1.4, an attacker can send packets that sends Pion DTLS into an infinite loop when processing. Version 2.1.4 contains a patch for this issue. There are currently no known