Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2026-54909

Опубликовано: 31 июл. 2026
Источник: nvd
CVSS3: 5.3
EPSS Низкий

Описание

pion/stun is a Go implementation of STUN. Prior to 3.1.3, XORMappedAddress.GetFromAs can panic while parsing a malformed short XOR-MAPPED-ADDRESS attribute in STUN or ICE Binding-response parsing paths, allowing remote denial of service. This issue is fixed in version 3.1.3.

EPSS

Процентиль: 30%
0.00371
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-20

Связанные уязвимости

CVSS3: 5.3
ubuntu
7 дней назад

pion/stun is a Go implementation of STUN. Prior to 3.1.3, XORMappedAddress.GetFromAs can panic while parsing a malformed short XOR-MAPPED-ADDRESS attribute in STUN or ICE Binding-response parsing paths, allowing remote denial of service. This issue is fixed in version 3.1.3.

CVSS3: 5.3
debian
7 дней назад

pion/stun is a Go implementation of STUN. Prior to 3.1.3, XORMappedAdd ...

CVSS3: 5.3
github
7 дней назад

Pion STUN vulnerable to remote denial of service via panic while parsing a malformed XOR-MAPPED-ADDRESS attribute

EPSS

Процентиль: 30%
0.00371
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-20