CVE-2021-42141

Опубликовано: 22 янв. 2024

Источник: nvd

CVSS3: 9.8

CVSS3: 7.5

EPSS Низкий

Описание

An issue was discovered in Contiki-NG tinyDTLS through 2018-08-30. One incorrect handshake could complete with different epoch numbers in the packets Client_Hello, Client_key_exchange, and Change_cipher_spec, which may cause denial of service.

Ссылки

http://packetstormsecurity.com/files/176625/Contiki-NG-tinyDTLS-Denial-Of-Service.html
Third Party Advisory
VDB Entry
https://github.com/contiki-ng/tinydtls/issues/27
Patch
https://seclists.org/fulldisclosure/2024/Jan/14
Mailing List
Third Party Advisory
http://packetstormsecurity.com/files/176625/Contiki-NG-tinyDTLS-Denial-Of-Service.html
Third Party Advisory
VDB Entry
http://seclists.org/fulldisclosure/2024/Jan/14
https://github.com/contiki-ng/tinydtls/issues/27
Patch
https://seclists.org/fulldisclosure/2024/Jan/14
Mailing List
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:contiki-ng:tinydtls:*:*:*:*:*:*:*:*

Версия до 2018-08-30 (включая)

EPSS

Процентиль: 31%

0.0012

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS3

Дефекты

CWE-755

Связанные уязвимости

GHSA-mfm9-9c5w-7f5g

CVSS3: 9.8

github

около 2 лет назад

EPSS

Процентиль: 31%

0.0012

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS3

Дефекты

CWE-755