Beveiligingsadvies

CVE-2026-54909

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-07-31 22:03:53
Laatst bijgewerkt 2026-08-03 17:30:22
Toegewezen door GitHub_M
CVSS-score 5.3
Status PUBLISHED

Beschrijving

pion/stun is a Go implementation of STUN. Prior to 3.1.3, XORMappedAddress.GetFromAs can panic while parsing a malformed short XOR-MAPPED-ADDRESS attribute in STUN or ICE Binding-response parsing paths, allowing remote denial of service. This issue is fixed in version 3.1.3.