Vulnerability · Published May 20, 2022 · Assigned by GitHub_M

CVE-2022-29189Buffer for inbound DTLS fragments has no limit

Medium 5.3

In plain English

A medium-severity buffer overflow in dtls from pion. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 2.1% (higher than 82% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)5.3Medium

Exploit odds (30 days)2.1%top 17.8% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

Pion DTLS is a Go implementation of Datagram Transport Layer Security. Prior to version 2.1.4, a buffer that was used for inbound network traffic had no upper limit. Pion DTLS would buffer all network traffic from the remote user until the handshake completes or timed out. An attacker could exploit this to cause excessive memory usage. Version 2.1.4 contains a patch for this issue. There are currently no known workarounds available.

Affected packages & fixed versions

Ecosystem	Package	Fixed in	Advisory
Debian:12	snowflake	2.2.0-1	DEBIAN-CVE-2022-29189
Debian:13	snowflake	2.2.0-1	DEBIAN-CVE-2022-29189
Debian:14	snowflake	2.2.0-1	DEBIAN-CVE-2022-29189
Go	github.com/pion/dtls	2.1.4	GHSA-cx94-mrg9-rq4j
Go	github.com/pion/dtls/v2	2.1.4	GHSA-cx94-mrg9-rq4j
Go	github.com/pion/dtls/v2	2.1.4	GO-2022-0461

Affected products (as reported)

Vendor	Product	Versions
pion	dtls	< 2.1.4

Weakness: CWE-120 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

References

https://github.com/pion/dtls/releases/tag/v2.1.4 x_refsource_MISC
https://github.com/pion/dtls/security/advisories/GHSA-cx94-mrg9-rq4j x_refsource_CONFIRM
https://github.com/pion/dtls/commit/a6397ff7282bc56dc37a68ea9211702edb4de1de x_refsource_MISC