Medium severity5.3NVD Advisory· Published May 21, 2022· Updated Jun 17, 2026
CVE-2022-29189
CVE-2022-29189
Description
Pion DTLS is a Go implementation of Datagram Transport Layer Security. Prior to version 2.1.4, a buffer that was used for inbound network traffic had no upper limit. Pion DTLS would buffer all network traffic from the remote user until the handshake completes or timed out. An attacker could exploit this to cause excessive memory usage. Version 2.1.4 contains a patch for this issue. There are currently no known workarounds available.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
github.com/pion/dtlsGo | < 2.1.4 | 2.1.4 |
github.com/pion/dtls/v2Go | < 2.1.4 | 2.1.4 |
Affected products
3- ghsa-coords2 versions
< 2.1.4+ 1 more
- (no CPE)range: < 2.1.4
- (no CPE)range: < 2.1.4
Patches
Vulnerability mechanics
References
7- github.com/pion/dtls/commit/a6397ff7282bc56dc37a68ea9211702edb4de1denvdPatchThird Party AdvisoryWEB
- github.com/advisories/GHSA-cx94-mrg9-rq4jghsaADVISORY
- github.com/pion/dtls/releases/tag/v2.1.4nvdThird Party AdvisoryWEB
- github.com/pion/dtls/security/advisories/GHSA-cx94-mrg9-rq4jnvdThird Party AdvisoryWEB
- nvd.nist.gov/vuln/detail/CVE-2022-29189ghsaADVISORY
- github.com/pion/dtlsghsaPACKAGE
- pkg.go.dev/vuln/GO-2022-0461ghsaWEB
News mentions
0No linked articles in our index yet.