Vulnerabilidades do Pion Stun
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Pion Stun: 1 registro(s), com versões afetadas e correções.
CVE-2026-54909
Média · 5.3
CWE-20 31/07/2026
Pion STUN vulnerable to remote denial of service via panic while parsing a malformed XOR-MAPPED-ADDRESS attribute
pion/stun is a Go implementation of STUN. Prior to 3.1.3, XORMappedAddress.GetFromAs can panic while parsing a malformed short XOR-MAPPED-ADDRESS attribute in STUN or ICE Binding-response parsing paths, allowing remote denial of service. This issue is fixed in version 3.1.3.