CVE-2022-29189

Pion DTLS is a Go implementation of Datagram Transport Layer Security. Prior to version 2.1.4, a buffer that was used for inbound network traffic had no upper limit. Pion DTLS would buffer all network traffic from the remote user until the handshake completes or timed out. An attacker could exploit this to cause excessive memory usage. Version 2.1.4 contains a patch for this issue. There are currently no known workarounds available.

• CWE-120

• https://github.com/pion/dtls/commit/a6397ff7282bc56dc37a68ea9211702edb4de1dePatch, Third Party Advisory
• https://github.com/pion/dtls/releases/tag/v2.1.4Third Party Advisory
• https://github.com/pion/dtls/security/advisories/GHSA-cx94-mrg9-rq4jThird Party Advisory
• https://github.com/pion/dtls/commit/a6397ff7282bc56dc37a68ea9211702edb4de1dePatch, Third Party Advisory
• https://github.com/pion/dtls/releases/tag/v2.1.4Third Party Advisory
• https://github.com/pion/dtls/security/advisories/GHSA-cx94-mrg9-rq4jThird Party Advisory

Published

May 21, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-29183GoCD is a continuous delivery server. GoCD versions 20.2.0 u…6.1
• CVE-2022-29184GoCD is a continuous delivery server. In GoCD versions prior…8.8
• CVE-2022-29185totp-rs is a Rust library that permits the creation of 2FA a…4.4
• CVE-2022-29186Rundeck is an open source automation service with a web cons…9.8
• CVE-2022-29187Git is a distributed revision control system. Git prior to v…7.8
• CVE-2022-29188Smokescreen is an HTTP proxy. The primary use case for Smoke…6.5
• CVE-2022-29190Pion DTLS is a Go implementation of Datagram Transport Layer…7.5
• CVE-2022-29191TensorFlow is an open source platform for machine learning. …5.5
• CVE-2022-29192TensorFlow is an open source platform for machine learning. …5.5
• CVE-2022-29193TensorFlow is an open source platform for machine learning. …5.5
• CVE-2022-29194TensorFlow is an open source platform for machine learning. …5.5
• CVE-2022-29195TensorFlow is an open source platform for machine learning. …5.5