PT-2022-19442 · Pion Dtls+2 · Pion Dtls+2

Juho Nurminen · Published 2022-05-20 · Updated 2026-01-19 · CVE-2022-29190

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Pion DTLS versions prior to 2.1.4

Description An attacker can send packets that will send Pion DTLS into an infinite loop when processing. This issue affects the DTLS server or client.

Recommendations For versions prior to 2.1.4, upgrade to Pion DTLS version 2.1.4 to resolve the issue. At the moment, there is no other information about additional mitigation measures.

Exploit

Fix

Infinite Loop

Weakness Enumeration

CWE-835

Related Identifiers

CVE-2022-29190

GHSA-CM8F-H6J3-P25C

GO-2022-0460

USN-7966-1

USN-7966-2

Affected Products

Linuxmint

Pion Dtls

Ubuntu

References · 21

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/29xxx/CVE-2022-29190.json · Exploit
• https://github.com/pion/dtls/commit/e0b2ce3592e8e7d73713ac67b363a2e192a4cecf · Patch
• https://osv.dev/vulnerability/USN-7966-2 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-29190 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-29190 · Security Note
• https://ubuntu.com/security/CVE-2022-29189 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-7966-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-29222 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-cm8f-h6j3-p25c · Vendor Advisory
• https://osv.dev/vulnerability/USN-7966-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-29190 · Vendor Advisory
• https://osv.dev/vulnerability/GO-2022-0460 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-7966-2 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-29190 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-29190 · Vendor Advisory