PT-2021-17901 · Unknown · Pion Webrtc

Gaukas · Published 2021-03-18 · Updated 2021-07-28 · CVE-2021-28681

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions: Pion WebRTC versions prior to 3.0.15

Description: The issue arises from improper teardown of the DTLS connection when certificate verification fails. As a result, data channel communication is incorrectly allowed with users who have failed DTLS certificate verification. This can occur when an attacker knows the ICE password and the attack takes place during the PeerConnection handshake. The issue can be detected by monitoring the PeerConnectionState in all versions of Pion WebRTC.

Recommendations: For versions prior to 3.0.15, users should upgrade to v3.0.15 to resolve the issue. As a temporary workaround, users should listen for when PeerConnectionState changes to PeerConnectionStateFailed and not continue using the PeerConnection when it enters this state.

Exploit

Fix

Incorrect Authorization

Weakness Enumeration

CWE-863

Related Identifiers

CVE-2021-28681

GHSA-74XM-QJ29-CQ8P

GO-2021-0104

Affected Products

Pion Webrtc

References · 13

• 🔥 https://github.com/pion/webrtc/issues/1708 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2021-28681 · Security Note
• https://osv.dev/vulnerability/CVE-2021-28681 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-74xm-qj29-cq8p · Vendor Advisory
• https://osv.dev/vulnerability/GO-2021-0104 · Vendor Advisory
• https://github.com/pion/webrtc/security/advisories/GHSA-74xm-qj29-cq8p · Note
• https://github.com/pion/webrtc/pull/1709 · Note
• https://github.com/pion/webrtc/commit/545613dcdeb5dedb01cce94175f40bcbe045df2e · Note
• https://github.com/pion/webrtc · Note
• https://t.me/cvenotify/11511 · Telegram Post
• https://pkg.go.dev/vuln/GO-2021-0104 · Note
• https://t.me/cvenotify/11943 · Telegram Post
• https://t.me/cibsecurity/25075 · Telegram Post