Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-wmpm-9r6p-rpww

Опубликовано: 24 янв. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

An issue was discovered in Contiki-NG tinyDTLS through master branch 53a0d97. DTLS servers allow remote attackers to reuse the same epoch number within two times the TCP maximum segment lifetime, which is prohibited in RFC6347. This vulnerability allows remote attackers to obtain sensitive application (data of connected clients).

An issue was discovered in Contiki-NG tinyDTLS through master branch 53a0d97. DTLS servers allow remote attackers to reuse the same epoch number within two times the TCP maximum segment lifetime, which is prohibited in RFC6347. This vulnerability allows remote attackers to obtain sensitive application (data of connected clients).

EPSS

Процентиль: 25%
0.00087
Низкий

7.5 High

CVSS3

Дефекты

CWE-303
CWE-755

Связанные уязвимости

CVSS3: 7.5
nvd
около 2 лет назад

An issue was discovered in Contiki-NG tinyDTLS through master branch 53a0d97. DTLS servers allow remote attackers to reuse the same epoch number within two times the TCP maximum segment lifetime, which is prohibited in RFC6347. This vulnerability allows remote attackers to obtain sensitive application (data of connected clients).

EPSS

Процентиль: 25%
0.00087
Низкий

7.5 High

CVSS3

Дефекты

CWE-303
CWE-755