CyberRota Analysis
AI-GeneratedThe Go implementation of STUN, prior to version 3.1.3, is vulnerable to a denial of service due to a panic that can occur when parsing malformed short XOR-MAPPED-ADDRESS attributes in STUN or ICE Binding responses. This vulnerability could be exploited by remote attackers to disrupt service availability. Organizations utilizing this library should prioritize upgrading to version 3.1.3 to mitigate potential disruptions.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
pion/stun is a Go implementation of STUN. Prior to 3.1.3, XORMappedAddress.GetFromAs can panic while parsing a malformed short XOR-MAPPED-ADDRESS attribute in STUN or ICE Binding-response parsing paths, allowing remote denial of service. This issue is fixed in version 3.1.3.