Lack of data validation - Path Traversal In github.com/pion/dtls
Description
Panic during unmarshal of Hello Verify Request in github.com/pion/dtls/v2
Impact
During the unmarshalling of a hello verify request we could try to unmarshal into too small a buffer. is could result in a panic leading the program to crash.
This issue could be abused to cause a denial of service.
Workaround
None, upgrade to 2.2.4
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Package | Affected version | Patched versions |
|---|---|---|---|
 go | - | ||
go | 2.2.4 |
Aliases
1. 2.
References
1. 2. 3.