Contiki-ng

Tinydtls

6 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.5

CVE-2021-42145

  • EPSS 0.06%
  • Published 24.01.2024 19:15:08
  • Last modified 21.11.2024 06:27:21

An assertion failure discovered in in check_certificate_request() in Contiki-NG tinyDTLS through master branch 53a0d97 allows attackers to cause a denial of service.

7.5

CVE-2021-42146

  • EPSS 0.09%
  • Published 24.01.2024 19:15:08
  • Last modified 21.11.2024 06:27:21

An issue was discovered in Contiki-NG tinyDTLS through master branch 53a0d97. DTLS servers allow remote attackers to reuse the same epoch number within two times the TCP maximum segment lifetime, which is prohibited in RFC6347. This vulnerability all...

9.1

CVE-2021-42147

  • EPSS 0.35%
  • Published 24.01.2024 19:15:08
  • Last modified 30.05.2025 15:15:21

Buffer over-read vulnerability in the dtls_sha256_update function in Contiki-NG tinyDTLS through master branch 53a0d97 allows remote attackers to cause a denial of service via crafted data packet.

9.1

CVE-2021-42143

  • EPSS 0.35%
  • Published 24.01.2024 18:15:08
  • Last modified 21.11.2024 06:27:21

An issue was discovered in Contiki-NG tinyDTLS through master branch 53a0d97. An infinite loop bug exists during the handling of a ClientHello handshake message. This bug allows remote attackers to cause a denial of service by sending a malformed Cli...

9.8

CVE-2021-42142

  • EPSS 1.06%
  • Published 23.01.2024 22:15:16
  • Last modified 11.06.2025 17:15:30

An issue was discovered in Contiki-NG tinyDTLS through master branch 53a0d97. DTLS servers mishandle the early use of a large epoch number. This vulnerability allows remote attackers to cause a denial of service and false-positive packet drops.

9.8

CVE-2021-42141

  • EPSS 0.12%
  • Published 22.01.2024 23:15:08
  • Last modified 20.06.2025 19:15:21

An issue was discovered in Contiki-NG tinyDTLS through 2018-08-30. One incorrect handshake could complete with different epoch numbers in the packets Client_Hello, Client_key_exchange, and Change_cipher_spec, which may cause denial of service.