CVE-2021-42146

概要

参考情報

• seclists.org/fulldisclosure/2024/Jan/19 · Mailing List
• seclists.org/fulldisclosure/2024/Jan/19

tinydtls のその他の脆弱性

• CVE-2021-42147緊急 9.1Buffer over-read vulnerability in the dtls_sha256_update function in Contiki-NG tinyDTLS through master branch 53a0d97 allows remote attacke…
• CVE-2021-42145高 7.5An assertion failure discovered in in check_certificate_request() in Contiki-NG tinyDTLS through master branch 53a0d97 allows attackers to c…
• CVE-2021-42143緊急 9.1An issue was discovered in Contiki-NG tinyDTLS through master branch 53a0d97. An infinite loop bug exists during the handling of a ClientHel…
• CVE-2021-42142緊急 9.8An issue was discovered in Contiki-NG tinyDTLS through master branch 53a0d97. DTLS servers mishandle the early use of a large epoch number. …
• CVE-2021-42141緊急 9.8An issue was discovered in Contiki-NG tinyDTLS through 2018-08-30. One incorrect handshake could complete with different epoch numbers in th…