Details

Impact

Pion DTLS versions v1.0.0 through v3.0.10 use random nonce generation with AES GCM ciphers, which makes it easier for remote attackers to obtain the authentication key and spoof data by leveraging the reuse of a nonce in a session and a "forbidden attack".

Patches

Upgrade to v3.1.1 or later. This version includes PR #​796, which uses the 64-bit sequence number to populate the nonce_explicit part of the GCM nonce. This is according to best practice outlined in RFC 9325 section 7.2.1.

v3.0.11 is a backport patch supporting Go v1.21

Workarounds

There are no workarounds without upgrading to version v3.0.11, v3.1.1 or later.

References

Commit fixing the bug: pion/dtls@61762de
Commit fixing the bug (backport): 90e241c
Pull request: #​796

Severity

• CVSS Score: 5.9 / 10 (Medium)
• Vector String: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

References

• https://github.com/pion/dtls/security/advisories/GHSA-9f3f-wv7r-qc8r
• https://github.com/pion/dtls/pull/796
• https://github.com/pion/dtls/commit/61762dee8217991882c5eb79856b9e7a73ee349f
• https://nvd.nist.gov/vuln/detail/CVE-2026-26014
• https://github.com/pion/dtls/commit/90e241cfec2985715efdd3d005972847462a67d6
• https://github.com/pion/dtls/releases/tag/v3.0.11
• https://github.com/pion/dtls/releases/tag/v3.1.1
• https://github.com/advisories/GHSA-9f3f-wv7r-qc8r

This data is provided by the GitHub Advisory Database (CC-BY 4.0).

Details

Impact

Remote denial of service via panic while parsing a crafted ECDHE_PSK ServerKeyExchange message.

Patches

Upgrade to v3.1.4 or later. This version includes this patch https://github.com/pion/dtls/pull/839 which fixes the issue.

Workarounds

No work around; please upgrade to v3.1.4 or a newer version.

Severity

• CVSS Score: 6.3 / 10 (Medium)
• Vector String: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N

References

• https://github.com/pion/dtls/security/advisories/GHSA-wg4g-wm44-ch5j
• https://nvd.nist.gov/vuln/detail/CVE-2026-54908
• https://github.com/pion/dtls/pull/839
• https://github.com/pion/dtls/commit/49458d604a4f3ebce1bf9587a0f3e5f3f6b4a55e
• https://github.com/pion/dtls/releases/tag/v3.1.3
• https://github.com/advisories/GHSA-wg4g-wm44-ch5j

This data is provided by the GitHub Advisory Database (CC-BY 4.0).

v3.1.4

Compare Source

Changelog

• e4aad60 Retact v3.1.3 for breaking compatiblity with firefox
• 0e3867b Restore Firefox compatibility
• 12eb398 Fix panic unmarshaling ECDHE_PSK ServerKeyExchange
• 85fca0a Add MasterKeyIdentifier to use_srtp ext in flight3 (#​835)
• fd27a52 Add private min and max version API (#​823)
• 620d642 Improve fuzzing for all extensions (#​805)
• 977de19 Update CI configs to v0.12.2
• e6950f0 Filter non-approved FIPS curves in FIPS mode (#​817)
• 848c4bc Optimize handshake memory usage
• d0e736c DTLS 1.3 OID filter extension (#​814)
• 956d41d Update module golang.org/x/crypto to v0.48.0 (#​809)
• b86cb75 Add missing checks and validations
• 726522d Apply modernize and lint upgrades
• d994b8b Update CI configs to v0.12.1
• 4fcce60 Fix handshake hang on Finish in retransmit state
• a25c8b8 Add ListenConfig option to Listener
• 42b83fe Remove custom AddUint48 helper
• 5a4e85a DTLS 1.3 Add the Certificate Authorities extension (#​807)
• 812fc22 DTLS 1.3 post handshake auth extension (#​806)
• 39f3100 DTLS 1.3 Add EarlyDataIndication extension (#​804)
• d1d58f2 Update CI configs to v0.12.0
• 16413ba Add HKDF funcs for Key Scheduling - DTLS v1.3 (#​737)
• accee59 Implement ChaCha20-Poly1305 Ciphersuite (#​794)
• 6b4fe8c Add RSA_PSS_RSAE back to DTLS 1.2 and fix parsing (#​801)
• 5ee9206 Upgrade E2E Test Docker Image (for OpenSSL 3.x) (#​799)

v3.1.3

Compare Source

Changelog

• 49458d6 Fix panic unmarshaling ECDHE_PSK ServerKeyExchange
• e4b257d Add MasterKeyIdentifier to use_srtp ext in flight3 (#​835)
• fd27a52 Add private min and max version API (#​823)
• 620d642 Improve fuzzing for all extensions (#​805)
• 977de19 Update CI configs to v0.12.2
• e6950f0 Filter non-approved FIPS curves in FIPS mode (#​817)
• 848c4bc Optimize handshake memory usage
• d0e736c DTLS 1.3 OID filter extension (#​814)
• 956d41d Update module golang.org/x/crypto to v0.48.0 (#​809)
• b86cb75 Add missing checks and validations
• 726522d Apply modernize and lint upgrades
• d994b8b Update CI configs to v0.12.1
• 4fcce60 Fix handshake hang on Finish in retransmit state
• a25c8b8 Add ListenConfig option to Listener
• 42b83fe Remove custom AddUint48 helper
• 5a4e85a DTLS 1.3 Add the Certificate Authorities extension (#​807)
• 812fc22 DTLS 1.3 post handshake auth extension (#​806)
• 39f3100 DTLS 1.3 Add EarlyDataIndication extension (#​804)
• d1d58f2 Update CI configs to v0.12.0
• 16413ba Add HKDF funcs for Key Scheduling - DTLS v1.3 (#​737)
• accee59 Implement ChaCha20-Poly1305 Ciphersuite (#​794)
• 6b4fe8c Add RSA_PSS_RSAE back to DTLS 1.2 and fix parsing (#​801)
• 5ee9206 Upgrade E2E Test Docker Image (for OpenSSL 3.x) (#​799)

v3.1.2

Compare Source

Changelog

• a621789 Retract v3.1.0
• 1beb12f Fix OpenSSL Interop for RSA SignatureHashAlgos
• 605dc7e Update module golang.org/x/crypto to v0.45.0 [SECURITY] (#​756)
• 2d6d27f Update CI configs to v0.11.39

v3.1.1

Compare Source

Changelog

• fa21c26 Retract v3.1.0
• dc45e23 Fix OpenSSL Interop for RSA SignatureHashAlgos

v3.1.0

Compare Source

Options patterns, Security fix and performance improvements.

Changelog

• 61762de Use sequence number for nonce in GCM ciphers (#​796)
• 46ee7c3 Refactor Common AEAD Code in Ciphersuite Package (#​789)
• 10bd10a Prefer server srtp protection profiles ordering
• 93c2677 Fix rare flaky test
• d46d2a7 Fix Bug in signature_algorithms_cert Handling (#​791)
• acad848 DTLS 1.3 signature_algorithms_cert Extension (#​788)
• 0a5b311 Introduce options patterns
• 9495bef DTLS 1.3 RSA-PSS Signature Scheme Support (#​778)
• f1c63e9 Refactor error types for 1.3 extensions (#​787)
• bed33fe Add PreSharedKey extensions for DTLS 1.3 (#​773)
• 01f7ba5 Update CI configs to v0.11.37
• 5b824b0 CCM Encrypt Speed + Memory Mgmt Improvements (#​784)
• 100a3aa GCM Speed + Memory Mgmt Improvements (#​783)
• 199a753 Add Ciphersuite Benchmark Tests (#​781)
• 6b2fbf1 Fix Race Condition in TestListenerCustomConnIDs (#​782)
• 8ea3afc Fix intermittent unit test failures (#​780)
• c6db81b Update README
• 44160f0 DTLS 1.3 CertificateRequest + Certificate Messages (#​774)
• 9121462 Add Cookie extension for DTLS 1.3 (#​770)

v3.0.11

Compare Source

Backport security fix for GHSA-9f3f-wv7r-qc8r (CVE-2026-26014)

This is the only release with the security fix for Go v1.21.

v3.0.10

Compare Source

Changelog

• 713910a Upgrade to pion/transport/v4
• e0d3160 Add the key share extension (#​749)
• 7a57e26 Update CI configs to v0.11.36
• 08d8c3e Fix gosec slice bounds warnings (#​764)
• 7b9612e Handshake fragments assembly refactoring (#​762)

v3.0.9

Compare Source

Changelog

• ab5f89b Implement TLS_EMPTY_RENEGOTIATION_INFO_SCSV
• d5761ac Prevent negative intervals

v3.0.8

Compare Source

Changelog

• ffd97f5 Backoff handshake retransmit
• 7ab1bc9 Update actions/checkout action to v6
• bdb5f23 Update module github.com/pion/transport/v3 to v3.1.1 (#​754)
• 1d9b6b1 Update module github.com/pion/transport/v3 to v3.1.0
• c06c3a7 Lock while writing to encryptedPackets
• ca7d80e Update CI configs to v0.11.32
• 9cfb13f Improve the record layer fuzz tests
• daa0fd4 Add fuzz tests for gcm
• 9ed5950 Add fuzz tests for ccm
• 7b68bd9 Add fuzz tests for packet buffer
• 7c62411 Update CI configs to v0.11.31
• 3e12f76 Add more tests for prf
• e7cbd62 Migrate elliptic curves from elliptic to ecdh
• 6ff535f Update module github.com/pion/transport/v3 to v3.0.8
• f6b0286 Add the supported_versions extension
• 120a895 Handle ECONNREFUSED timeout
• ed044c0 Update CI configs to v0.11.29
• 5611b14 Apply go modernize
• 27c3405 Update actions/checkout action to v5
• 8764fbd Update CI configs to v0.11.26
• 465f544 Update CI configs to v0.11.25
• 6e1e3c9 Update module github.com/stretchr/testify to v1.11.1
• 495a7b5 Update CI configs to v0.11.24
• 0b11eab Update module github.com/stretchr/testify to v1.11.0
• b8c2ab4 Fix lint issues with golangci-lint@​v2
• 0bf1902 Update CI configs to v0.11.22

v3.0.7

Compare Source

Changelog

• e3cf6bc Comply with RFC5746 and RFC5246
• f0c0987 Update module github.com/pion/logging to v0.2.4
• 63bf30c Update CI configs to v0.11.20
• 34fbe21 Replace interface{} with any
• 8bf2c71 Fix packet buffer read index after buffer resize
• 806ff2f Refactor cfg.onFlightState, avoid data race
• f5e908f Update CI configs to v0.11.19
• 58d3b7e Update lint rules, force testify/assert
• e57dc04 Update social media links, move to discord