https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-28T07:53:55.419825+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2022-29189 CVE-2022-29189 — Buffer for inbound DTLS fragments has no limit 2026-09-28T07:53:55.425408+00:00

Affected: pion dtls

Pion DTLS is a Go implementation of Datagram Transport Layer Security. Prior to version 2.1.4, a buffer that was used for inbound network traffic had no upper limit. Pion DTLS would buffer all network traffic from the remote user until the handshake completes or timed out. An attacker could exploit this to cause excessive memory usage. Version 2.1.4 contains a patch for this issue. There are currently no known workarounds available.

 https://vulnerability.circl.lu/vuln/usn-7966-1 USN-7966-1 — snowflake vulnerabilities 2026-09-28T07:53:55.425790+00:00

Affected: Ubuntu:Pro:22.04:LTS: snowflake

It was discovered that Pion DTLS, vendored in Snowflake, did not impose a limit on the amount of data that was buffered during the handshake. An attacker could possibly use the issue to cause a denial of service. (CVE-2022-29189)

It was discovered that Pion DTLS, vendored in Snowflake, did not prevent the fragmentBuffer from processing zero length fragments. An attacker could possibly use the issue to cause a denial of service. (CVE-2022-29190)

It was discovered that Pion DTLS, vendored in Snowflake, did not require CertificateVerify when Client Cert was sent. An attacker could possibly use the issue to cause a denial of service. (CVE-2022-29222)