Описание
Panic during unmarshal of Hello Verify Request in github.com/pion/dtls/v2
Impact
When attempting to unmarshal a Server Hello request we could attempt to unmarshal into a buffer that was too small. This could result in a panic leading the program to crash.
This issue could be abused to cause a denial of service.
Workaround
None
Пакеты
Наименование
github.com/pion/dtls
go
Затронутые версииВерсия исправления
<= 1.5.4
Отсутствует
Наименование
github.com/pion/dtls/v2
go
Затронутые версииВерсия исправления
< 2.2.4
2.2.4
5.9 Medium
CVSS3
Дефекты
CWE-125
5.9 Medium
CVSS3
Дефекты
CWE-125