Pion DTLS Header reconstruction method can be thrown into an infinite loop

Description

References

• pion/dtls security advisory · WEB
• nvd.nist.gov/vuln/detail/CVE-2022-29190 · ADVISORY
• pion/dtls commit e0b2ce3 · WEB
• pion/dtls release v2.1.4 · WEB
• pkg.go.dev/vuln/GO-2022-0460 · WEB
• github.com/pion/dtls · PACKAGE

More vulnerabilities in github.com/pion/dtls

• CVE-2026-26014MEDIUM 5.9Pion DTLS is a Go implementation of Datagram Transport Layer Security. Pion DTLS versions v1.0.0 through v3.0.10 and 3.1.0 use random nonce …
• GHSA-4xgv-j62q-h3rjMEDIUM 5.9Panic during unmarshal of Hello Verify Request in github.com/pion/dtls/v2
• GHSA-hxp2-xqf3-v83hMEDIUM 5.9Panic during unmarshal of Hello Verify Request in github.com/pion/dtls/v2
• CVE-2022-29222HIGH 7.5Pion DTLS is a Go implementation of Datagram Transport Layer Security. Prior to version 2.1.5, a DTLS Client could provide a Certificate tha…
• CVE-2022-29189MEDIUM 5.3Pion DTLS is a Go implementation of Datagram Transport Layer Security. Prior to version 2.1.4, a buffer that was used for inbound network tr…