—
GO-2022-0461
Unbounded memory consumption in github.com/pion/dtls/v2
Quick fix
GO-2022-0461 — github.com/pion/dtls/v2: upgrade to the fixed version with the command below.
go get github.com/pion/dtls/v2@v2.1.4Details
Attacker can cause unbounded memory consumption.
The Pion DTLS client and server buffer handshake data with no upper limit, permitting an attacker to cause unbounded memory consumption by sending an unterminated handshake.
Are you affected?
Enter the version of the package you're using.