Data

Tools

Indexes

Applications

Experiments

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

go

github.com/pion/dtls

go

View on github.com · View on proxy.golang.org

Security Advisories for github.com/pion/dtls in go

Moderate
4 months ago

Pion DTLS's usage of random nonce generation with AES GCM ciphers risks leaking the authentication key GSA_kwCzR0hTQS05ZjNmLXd2N3ItcWM4cs4ABSNl

go github.com/pion/dtls/v3, github.com/pion/dtls, github.com/pion/dtls/v2
Moderate
about 4 years ago

Pion/DLTS Accepts Client Certificates Without CertificateVerify GSA_kwCzR0hTQS13NDVqLWY4MzItaHh2aM4AArM9

go github.com/pion/dtls/v2, github.com/pion/dtls
High
about 4 years ago

Pion DTLS Header reconstruction method can be thrown into an infinite loop GSA_kwCzR0hTQS1jbThmLWg2ajMtcDI1Y84AArBD

go github.com/pion/dtls/v2, github.com/pion/dtls
Moderate
about 4 years ago

Pion/DTLS contains buffer for inbound DTLS fragments with no limit GSA_kwCzR0hTQS1jeDk0LW1yZzktcnE0as4AArBC

go github.com/pion/dtls/v2, github.com/pion/dtls
Critical
almost 5 years ago

Improper Authenication in Pion DTLS MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTdnZmctNjkzNC1tcXEy

go github.com/pion/dtls

Filter by Severity

Moderate 3 High 1 Critical 1