—
GO-2026-6165
Panic while parsing crafted ECDHE_PSK ServerKeyExchange in github.com/pion/dtls/v3
빠른 조치
GO-2026-6165 — github.com/pion/dtls/v3: 아래 명령으로 수정 버전으로 올리세요.
go get github.com/pion/dtls/v3@v3.1.4상세
In github.com/pion/dtls/v3 before 3.1.4, MessageServerKeyExchange.Unmarshal does not verify that data remains after parsing the PSK identity hint when handling ECDHE_PSK key exchange messages. A remote peer sending a crafted ServerKeyExchange message where the PSK hint consumes all remaining data triggers an index out of range runtime panic, causing a denial of service.
이 버전이 영향받나요?
사용 중인 패키지 버전을 입력하면 즉시 평가합니다.