CVE-2021-42147

概要

参考情報

• seclists.org/fulldisclosure/2024/Jan/20 · Mailing List
• seclists.org/fulldisclosure/2024/Jan/20

tinydtls のその他の脆弱性

• CVE-2021-42146高 7.5An issue was discovered in Contiki-NG tinyDTLS through master branch 53a0d97. DTLS servers allow remote attackers to reuse the same epoch nu…
• CVE-2021-42145高 7.5An assertion failure discovered in in check_certificate_request() in Contiki-NG tinyDTLS through master branch 53a0d97 allows attackers to c…
• CVE-2021-42143緊急 9.1An issue was discovered in Contiki-NG tinyDTLS through master branch 53a0d97. An infinite loop bug exists during the handling of a ClientHel…
• CVE-2021-42142緊急 9.8An issue was discovered in Contiki-NG tinyDTLS through master branch 53a0d97. DTLS servers mishandle the early use of a large epoch number. …
• CVE-2021-42141緊急 9.8An issue was discovered in Contiki-NG tinyDTLS through 2018-08-30. One incorrect handshake could complete with different epoch numbers in th…