MEDIUM 5.3

GHSA-34rh-wp3j-6cxc

Pion STUN vulnerable to remote denial of service via panic while parsing a malformed XOR-MAPPED-ADDRESS attribute

Quick fix

GHSA-34rh-wp3j-6cxc — github.com/pion/stun/v3: upgrade to the fixed version with the command below.

go get github.com/pion/stun/v3@v3.1.5

Details

### Impact Remote denial of service via panic while parsing a malformed XOR-MAPPED-ADDRESS attribute

### Patches Upgrade to v3.1.5 or later. This version includes this patch https://github.com/pion/stun/pull/278 which fixes the issue.

### Workarounds No work around; please upgrade to v3.1.5 or a newer version.

Enter the version of the package you're using.

Introduced in: 0 Fixed in: 3.1.5

Fix go get github.com/pion/stun/v3@v3.1.5

Introduced in: 0

No fixed version published yet for github.com/pion/stun/v2 (go modules). Pin to a known-safe version or switch to an alternative.

Introduced in: 0

No fixed version published yet for github.com/pion/stun (go modules). Pin to a known-safe version or switch to an alternative.