Eclipse ≫ Tinydtls

2 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.

7.5

CVE-2021-34430

Exploit

EPSS 0.18%
Published 08.07.2021 03:15:07
Last modified 21.11.2024 06:10:23

Eclipse TinyDTLS through 0.9-rc1 relies on the rand function in the C library, which makes it easier for remote attackers to compute the master key and then decrypt DTLS traffic.

7.5

CVE-2017-7243

EPSS 0.76%
Published 24.03.2017 15:59:01
Last modified 20.04.2025 01:37:25

Eclipse tinydtls 0.8.2 for Eclipse IoT allows remote attackers to cause a denial of service (DTLS peer crash) by sending a "Change cipher spec" packet without pre-handshake.