contiki-ng/tinydtls

contiki-ng/tinydtls

Releases0

Stars9

A version of tinyDTLS that is refactored to be more easy to use "standalone" (e.g. without bindings to a specific IP-stack).

Log in to subscribe

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2021-42142 ↗	Jan 23, 2024Tuesday, 23 January 2024, 22:15	9.8 CRITICAL	—
An issue was discovered in Contiki-NG tinyDTLS through master branch 53a0d97. DTLS servers mishandle the early use of a large epoch number. This vulnerability allows remote attackers to cause a denial of service and false-positive packet drops.
CVE-2021-42141 ↗	Jan 22, 2024Monday, 22 January 2024, 23:15	9.8 CRITICAL	—
An issue was discovered in Contiki-NG tinyDTLS through 2018-08-30. One incorrect handshake could complete with different epoch numbers in the packets Client_Hello, Client_key_exchange, and Change_cipher_spec, which may cause denial of service.