CVE-2019-20786 - handleIncomingPacket in conn.go in Pion DTLS before 1.5.2 lacks a check for application data with epoch 0, which allows remote attackers to inject arbitrary unencrypted data after handshake completion

Back Back to CVE browser

CRITICAL

handleIncomingPacket in conn.go in Pion DTLS before 1.5.2 lacks a check for application data with epoch 0, which allows remote attackers to inject arbitrary unencrypted data after handshake completion

Published Apr 19, 2020

9.8

CRITICAL

CVSS 3.1

EPSS 3.01%

Description

handleIncomingPacket in conn.go in Pion DTLS before 1.5.2 lacks a check for application data with epoch 0, which allows remote attackers to inject arbitrary unencrypted data after handshake completion.

Affected products

Ecosystem	Package	Introduced	Fixed
Go	github.com/pion/dtls	0	1.5.2

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-287

Improper Authentication

References (8)

https://github.com/advisories/GHSA-7gfg-6934-mqq2
Advisory
https://github.com/pion/dtls/commit/fd73a5df2ff0e1fb6ae6a51e2777d7a16cc4f4e0
x_refsource_MISCPatchThird Party Advisory
https://github.com/pion/dtls/compare/v1.5.1...v1.5.2
x_refsource_MISCPatchThird Party Advisory
https://github.com/pion/dtls/pull/128
https://nvd.nist.gov/vuln/detail/CVE-2019-20786
https://pkg.go.dev/vuln/GO-2020-0038
https://www.usenix.org/conference/usenixsecurity20/presentation/fiterau-brostean
x_refsource_MISCThird Party Advisory
https://www.usenix.org/system/files/sec20fall_fiterau-brostean_prepub.pdf
x_refsource_MISCExploitThird Party Advisory

Link	Providers	Tags
https://github.com/advisories/GHSA-7gfg-6934-mqq2		Advisory
https://github.com/pion/dtls/commit/fd73a5df2ff0e1fb6ae6a51e2777d7a16cc4f4e0		x_refsource_MISCPatchThird Party Advisory
https://github.com/pion/dtls/compare/v1.5.1...v1.5.2		x_refsource_MISCPatchThird Party Advisory
https://github.com/pion/dtls/pull/128
https://nvd.nist.gov/vuln/detail/CVE-2019-20786
https://pkg.go.dev/vuln/GO-2020-0038
https://www.usenix.org/conference/usenixsecurity20/presentation/fiterau-brostean		x_refsource_MISCThird Party Advisory
https://www.usenix.org/system/files/sec20fall_fiterau-brostean_prepub.pdf		x_refsource_MISCExploitThird Party Advisory