critical9.8
CVE-2021-42141
An issue was discovered in Contiki-NG tinyDTLS through 2018-08-30.
Impact
An issue was discovered in Contiki-NG tinyDTLS through 2018-08-30. One incorrect handshake could complete with different epoch numbers in the packets Client_Hello, Client_key_exchange, and Change_cipher_spec, which may cause denial of service.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Contiki-Ng | Tinydtls | through 2018-08-30 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/176625/Contiki-NG-tinyDTLS-Denial-Of-Service.html
- https://github.com/contiki-ng/tinydtls/issues/27
- https://seclists.org/fulldisclosure/2024/Jan/14
- http://packetstormsecurity.com/files/176625/Contiki-NG-tinyDTLS-Denial-Of-Service.html
- http://seclists.org/fulldisclosure/2024/Jan/14
- https://github.com/contiki-ng/tinydtls/issues/27
- https://seclists.org/fulldisclosure/2024/Jan/14