CVE-2021-28681

Pion WebRTC before 3.0.15 didn't properly tear down the DTLS Connection when certificate verification failed

published March 18, 2021

CVSS
—
EPSS
1%
Percentile
51.7
In the wild
Unconfirmed
What it is

Pion WebRTC before 3.0.15 didn't properly tear down the DTLS Connection when certificate verification failed. The PeerConnectionState was set to failed, but a user could ignore that and continue to use the PeerConnection. )A WebRTC implementation shouldn't allow the user to continue if verification has failed.)

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00677 · 51.7th percentile
Published
2021-03-18T03:20Z
EPSS history
Timeline
  • 18 MAR 03:20Z
    Pion WebRTC before 3.0.15 didn't properly tear down the DTLS Connection when certificate verification failed
    cvelistv5