CVE-2022-29222

Pion DTLS is a Go implementation of Datagram Transport Layer Security. Prior to version 2.1.5, a DTLS Client could provide a Certificate that it doesn't posses the private key for and Pion DTLS wouldn't reject it. This issue affects users that are using Client certificates only. The connection itself is still secure. The Certificate provided by clients can't be trusted when using a Pion DTLS server prior to version 2.1.5. Users should upgrade to version 2.1.5 to receive a patch. There are currently no known workarounds.

• CWE-295

• https://github.com/pion/dtls/commit/d2f797183a9f044ce976e6df6f362662ca722412Patch, Third Party Advisory
• https://github.com/pion/dtls/releases/tag/v2.1.5Release Notes, Third Party Advisory
• https://github.com/pion/dtls/security/advisories/GHSA-w45j-f832-hxvhThird Party Advisory
• https://github.com/pion/dtls/commit/d2f797183a9f044ce976e6df6f362662ca722412Patch, Third Party Advisory
• https://github.com/pion/dtls/releases/tag/v2.1.5Release Notes, Third Party Advisory
• https://github.com/pion/dtls/security/advisories/GHSA-w45j-f832-hxvhThird Party Advisory

Published

May 21, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-29217PyJWT is a Python implementation of RFC 7519. PyJWT supports…7.5
• CVE-2022-29218RubyGems is a package registry used to supply software for t…7.5
• CVE-2022-29219Lodestar is a TypeScript implementation of the Ethereum Cons…7.5
• CVE-2022-2922Relative Path Traversal in GitHub repository dnnsoftware/dnn…4.9
• CVE-2022-29220github-action-merge-dependabot is an action that automatical…6.5
• CVE-2022-29221Smarty is a template engine for PHP, facilitating the separa…8.8
• CVE-2022-29223Azure RTOS USBX is a USB host, device, and on-the-go (OTG) e…9.8
• CVE-2022-29224Envoy is a cloud-native high-performance proxy. Versions of …5.9
• CVE-2022-29225Envoy is a cloud-native high-performance proxy. In versions …7.5
• CVE-2022-29226Envoy is a cloud-native high-performance proxy. In versions …9.1
• CVE-2022-29227Envoy is a cloud-native high-performance edge/middle/service…7.5
• CVE-2022-29228Envoy is a cloud-native high-performance proxy. In versions …7.5