https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 05:59:36 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-343796 EUVD-2026-343796 https://cve.radiocsirt.org/vuln/euvd-2026-343796 https://cve.radiocsirt.org/vuln/fkie_cve-2026-54909 <p>pion/stun is a Go implementation of STUN. Prior to 3.1.3, XORMappedAddress.GetFromAs can panic while parsing a malformed short XOR-MAPPED-ADDRESS attribute in STUN or ICE Binding-response parsing paths, allowing remote denial of service. This issue is fixed in version 3.1.3.</p> <p>pion/stun is a Go implementation of STUN. Prior to 3.1.3, XORMappedAddress.GetFromAs can panic while parsing a malformed short XOR-MAPPED-ADDRESS attribute in STUN or ICE Binding-response parsing paths, allowing remote denial of service. This issue is fixed in version 3.1.3.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-54909 https://cve.radiocsirt.org/vuln/ghsa-34rh-wp3j-6cxc <p><strong>Affected:</strong> Go: github.com/pion/stun/v3, Go: github.com/pion/stun/v2, Go: github.com/pion/stun</p> <p>### Impact Remote denial of service via panic while parsing a malformed XOR-MAPPED-ADDRESS attribute</p> <p>### Patches Upgrade to v3.1.5 or later. This version includes this patch https://github.com/pion/stun/pull/278 which fixes the issue.</p> <p>### Workarounds No work around; please upgrade to v3.1.5 or a newer version.</p> <p><strong>Affected:</strong> Go: github.com/pion/stun/v3, Go: github.com/pion/stun/v2, Go: github.com/pion/stun</p> <p>### Impact Remote denial of service via panic while parsing a malformed XOR-MAPPED-ADDRESS attribute</p> <p>### Patches Upgrade to v3.1.5 or later. This version includes this patch https://github.com/pion/stun/pull/278 which fixes the issue.</p> <p>### Workarounds No work around; please upgrade to v3.1.5 or a newer version.</p> https://cve.radiocsirt.org/vuln/ghsa-34rh-wp3j-6cxc https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-54909 <p><strong>Affected:</strong> Ubuntu:24.04:LTS: golang-github-pion-stun, Ubuntu:26.04:LTS: golang-github-pion-stun, Ubuntu:26.04:LTS: golang-github-pion-stun-v3</p> <p>pion/stun is a Go implementation of STUN. Prior to 3.1.3, XORMappedAddress.GetFromAs can panic while parsing a malformed short XOR-MAPPED-ADDRESS attribute in STUN or ICE Binding-response parsing paths, allowing remote denial of service. This issue is fixed in version 3.1.3.</p> <p><strong>Affected:</strong> Ubuntu:24.04:LTS: golang-github-pion-stun, Ubuntu:26.04:LTS: golang-github-pion-stun, Ubuntu:26.04:LTS: golang-github-pion-stun-v3</p> <p>pion/stun is a Go implementation of STUN. Prior to 3.1.3, XORMappedAddress.GetFromAs can panic while parsing a malformed short XOR-MAPPED-ADDRESS attribute in STUN or ICE Binding-response parsing paths, allowing remote denial of service. This issue is fixed in version 3.1.3.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-54909