Security Advisory
CVE-2019-20786
9.8
CRITICAL
Vulnerability Description
handleIncomingPacket in conn.go in Pion DTLS before 1.5.2 lacks a check for application data with epoch 0, which allows remote attackers to inject arbitrary unencrypted data after handshake completion.
Published Date
April 19, 2020
Official Source
NIST NVD Advisory