GHSA-cm8f-h6j3-p25c
Pion DTLS Header reconstruction method can be thrown into an infinite loop
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Go | github.com/pion/dtls | < 2.1.4 | 2.1.4 |
| Go | github.com/pion/dtls/v2 | < 2.1.4 | 2.1.4 |
Details
As written in the advisory (Markdown source, shown as plain text).
### Impact
An attacker can send packets that will send Pion DTLS into an infinite loop when processing.
### Patches
Upgrade to Pion DTLS v2.1.4
### Workarounds
No workarounds available, upgrade to Pion DTLS v2.1.4
### References
Thank you to [Juho Nurminen](https://github.com/jupenur) and the Mattermost team for discovering and reporting this.
### For more information
If you have any questions or comments about this advisory:
* Open an issue in [Pion DTLS](http://github.com/pion/dtls)
* Email us at [[email protected]](mailto:[email protected])
References
External links from the advisory. They lead to third-party sites.