CVE-2022-29189
Buffer for inbound DTLS fragments has no limit
Pion DTLS is a Go implementation of Datagram Transport Layer Security. Prior to version 2.1.4, a buffer that was used for inbound network traffic had no upper limit. Pion DTLS would buffer all network traffic from the remote user until the handshake completes or timed out. An attacker could exploit this to cause excessive memory usage. Version 2.1.4 contains a patch for this issue. There are currently no known workarounds available.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- Low
Exploit likelihood
What each source reports
CVE List Score used
Buffer for inbound DTLS fragments has no limit
Pion DTLS is a Go implementation of Datagram Transport Layer Security. Prior to version 2.1.4, a buffer that was used for inbound network traffic had no upper limit. Pion DTLS would buffer all network traffic from the remote user until the handshake completes or timed out. An attacker could exploit this to cause excessive memory usage. Version 2.1.4 contains a patch for this issue. There are currently no known workarounds available.
- Record
CVE-2022-29189- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L - Weakness
- CWE-120
- Updated
- 2026-11-02
EUVDEUVD-2022-3660
Pion DTLS is a Go implementation of Datagram Transport Layer Security. Prior to version 2.1.4, a buffer that was used for inbound network traffic had no upper limit. Pion DTLS would buffer all network traffic from the remote user until the handshake completes or timed out. An attacker could exploit this to cause excessive memory usage. Version 2.1.4 contains a patch for this issue. There are currently no known workarounds available.
- Record
EUVD-2022-3660- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-cx94-mrg9-rq4j
Pion/DTLS contains buffer for inbound DTLS fragments with no limit
Impact
A buffer that was used for inbound network traffic had no upper limit. Pion DTLS would buffer all network traffic from the remote user until the handshake completes or times out. An attacker could exploit this to cause excessive memory usage.
Patches
Upgrade to Pion DTLS v2.1.4
Workarounds
No workarounds available, upgrade to Pion DTLS v2.1.4
References
Thank you to Juho Nurminen and the Mattermost team for discovering and reporting this.
For more information
If you have any questions or comments about this advisory:
- Open an issue in Pion DTLS
- Email us at [email protected]
- Record
GHSA-cx94-mrg9-rq4j- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L - Weakness
- CWE-120
- Updated
- 2026-11-02
NVD
Pion DTLS is a Go implementation of Datagram Transport Layer Security. Prior to version 2.1.4, a buffer that was used for inbound network traffic had no upper limit. Pion DTLS would buffer all network traffic from the remote user until the handshake completes or timed out. An attacker could exploit this to cause excessive memory usage. Version 2.1.4 contains a patch for this issue. There are currently no known workarounds available.
- Record
CVE-2022-29189- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L - CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-120
- Updated
- 2026-11-02
OSV
Buffer for inbound DTLS fragments has no limit
Pion DTLS is a Go implementation of Datagram Transport Layer Security. Prior to version 2.1.4, a buffer that was used for inbound network traffic had no upper limit. Pion DTLS would buffer all network traffic from the remote user until the handshake completes or timed out. An attacker could exploit this to cause excessive memory usage. Version 2.1.4 contains a patch for this issue. There are currently no known workarounds available.
- Record
CVE-2022-29189- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L - Weakness
- CWE-120
- Updated
- 2026-11-02
OSVDEBIAN-CVE-2022-29189
Pion DTLS is a Go implementation of Datagram Transport Layer Security. Prior to version 2.1.4, a buffer that was used for inbound network traffic had no upper limit. Pion DTLS would buffer all network traffic from the remote user until the handshake completes or timed out. An attacker could exploit this to cause excessive memory usage. Version 2.1.4 contains a patch for this issue. There are currently no known workarounds available.
- Record
DEBIAN-CVE-2022-29189- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L - Updated
- 2026-11-03
Show 5 moreShow less
OSVGHSA-cx94-mrg9-rq4j
Pion/DTLS contains buffer for inbound DTLS fragments with no limit
Impact
A buffer that was used for inbound network traffic had no upper limit. Pion DTLS would buffer all network traffic from the remote user until the handshake completes or times out. An attacker could exploit this to cause excessive memory usage.
Patches
Upgrade to Pion DTLS v2.1.4
Workarounds
No workarounds available, upgrade to Pion DTLS v2.1.4
References
Thank you to Juho Nurminen and the Mattermost team for discovering and reporting this.
For more information
If you have any questions or comments about this advisory:
- Open an issue in Pion DTLS
- Email us at [email protected]
- Record
GHSA-cx94-mrg9-rq4j- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L - Weakness
- CWE-120
- Updated
- 2026-11-02
OSVUBUNTU-CVE-2022-29189
Pion DTLS is a Go implementation of Datagram Transport Layer Security. Prior to version 2.1.4, a buffer that was used for inbound network traffic had no upper limit. Pion DTLS would buffer all network traffic from the remote user until the handshake completes or timed out. An attacker could exploit this to cause excessive memory usage. Version 2.1.4 contains a patch for this issue. There are currently no known workarounds available.
- Record
UBUNTU-CVE-2022-29189- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L - Updated
- 2026-11-02
OSVGO-2022-0461 No score
Unbounded memory consumption in github.com/pion/dtls/v2
Attacker can cause unbounded memory consumption.
The Pion DTLS client and server buffer handshake data with no upper limit, permitting an attacker to cause unbounded memory consumption by sending an unterminated handshake.
- Record
GO-2022-0461- Updated
- 2026-11-02
OSVUSN-7966-1 No score
snowflake vulnerabilities
It was discovered that Pion DTLS, vendored in Snowflake, did not impose a limit on the amount of data that was buffered during the handshake. An attacker could possibly use the issue to cause a denial of service. (CVE-2022-29189)
It was discovered that Pion DTLS, vendored in Snowflake, did not prevent the fragmentBuffer from processing zero length fragments. An attacker could possibly use the issue to cause a denial of service. (CVE-2022-29190)
It was discovered that Pion DTLS, vendored in Snowflake, did not require CertificateVerify when Client Cert was sent. An attacker could possibly use the issue to cause a denial of service. (CVE-2022-29222)
- Record
USN-7966-1- Updated
- 2026-11-02
OSVUSN-7966-2 No score
telegraf vulnerabilities
USN-7966-1 fixed vulnerabilities in Snowflake. This update provides the corresponding updates for Telegraf.
Original advisory details:
It was discovered that Pion DTLS, vendored in Telegraf, did not impose a limit on the amount of data that was buffered during the handshake. An attacker could possibly use the issue to cause a denial of service. (CVE-2022-29189)
It was discovered that Pion DTLS, vendored in Telegraf, did not prevent the fragmentBuffer from processing zero length fragments. An attacker could possibly use the issue to cause a denial of service. (CVE-2022-29190)
It was discovered that Pion DTLS, vendored in Telegraf, did not require CertificateVerify when Client Cert was sent. An attacker could possibly use the issue to cause a denial of service. (CVE-2022-29222)
- Record
USN-7966-2- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
github.com/pion/dtlsGo |
before 2.1.4 | 2.1.4 |
github.com/pion/dtls/v2Go |
before 2.1.4 | 2.1.4 |
snowflakeDebian:12 |
before 2.2.0-1 | 2.2.0-1 |
snowflakeDebian:13 |
before 2.2.0-1 | 2.2.0-1 |
snowflakeDebian:14 |
before 2.2.0-1 | 2.2.0-1 |
snowflakeUbuntu:Pro:22.04:LTS |
before 1.1.0-2ubuntu0.1+esm2, plus listed versions 1.1.0-11.1.0-21.1.0-2ubuntu0.11.1.0-2ubuntu0.1+esm1 |
1.1.0-2ubuntu0.1+esm2 |
telegrafUbuntu:Pro:22.04:LTS |
before 1.21.4+ds1-0ubuntu2+esm2, plus listed versions 1.19.2+ds1-0ubuntu11.21.2+ds1-0ubuntu11.21.4+ds1-0ubuntu11.21.4+ds1-0ubuntu2 |
1.21.4+ds1-0ubuntu2+esm2 |
snowflakeUbuntu:Pro:22.04:LTS From an advisory covering 3 CVEs |
before 1.1.0-2ubuntu0.1+esm2, plus listed versions 1.1.0-11.1.0-21.1.0-2ubuntu0.11.1.0-2ubuntu0.1+esm1 |
1.1.0-2ubuntu0.1+esm2 |
telegrafUbuntu:Pro:22.04:LTS From an advisory covering 3 CVEs |
before 1.21.4+ds1-0ubuntu2+esm2, plus listed versions 1.19.2+ds1-0ubuntu11.21.2+ds1-0ubuntu11.21.4+ds1-0ubuntu11.21.4+ds1-0ubuntu2 |
1.21.4+ds1-0ubuntu2+esm2 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | OSV | |
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2022-29189 is a medium vulnerability (CVSS 5.3) in Pion Dtls, published May 20, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.15%, the 82nd percentile. Fixed in github.com/pion/dtls 2.1.4.
References
github.com/pion/dtls/releases/tag/v2.1.4
nvd.nist.gov/vuln/detail/CVE-2022-29189
pkg.go.dev/vuln/GO-2022-0461
Show 8 moreShow less
security-tracker.debian.org/tracker/CVE-2022-29189
ubuntu.com/security/CVE-2022-29189
cve.org/CVERecord?id=CVE-2022-29189