CVE-2021-42141

概要

参考情報

• packetstormsecurity.com/files/176625/Contiki-NG-tinyDTLS-Denial-Of-Service.html · Third Party Advisory
• contiki-ng/tinydtls · Patch
• seclists.org/fulldisclosure/2024/Jan/14 · Mailing List
• seclists.org/fulldisclosure/2024/Jan/14

tinydtls のその他の脆弱性

• CVE-2021-42147緊急 9.1Buffer over-read vulnerability in the dtls_sha256_update function in Contiki-NG tinyDTLS through master branch 53a0d97 allows remote attacke…
• CVE-2021-42146高 7.5An issue was discovered in Contiki-NG tinyDTLS through master branch 53a0d97. DTLS servers allow remote attackers to reuse the same epoch nu…
• CVE-2021-42145高 7.5An assertion failure discovered in in check_certificate_request() in Contiki-NG tinyDTLS through master branch 53a0d97 allows attackers to c…
• CVE-2021-42143緊急 9.1An issue was discovered in Contiki-NG tinyDTLS through master branch 53a0d97. An infinite loop bug exists during the handling of a ClientHel…
• CVE-2021-42142緊急 9.8An issue was discovered in Contiki-NG tinyDTLS through master branch 53a0d97. DTLS servers mishandle the early use of a large epoch number. …