CVE-2021-42142
23.01.2024, 22:15
An issue was discovered in Contiki-NG tinyDTLS through master branch 53a0d97. DTLS servers mishandle the early use of a large epoch number. This vulnerability allows remote attackers to cause a denial of service and false-positive packet drops.Enginsight
| Vendor | Product | Version |
|---|---|---|
| contiki-ng | tinydtls | 𝑥 ≤ 2018-08-30 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-755 - Improper Handling of Exceptional ConditionsThe software does not handle or incorrectly handles an exceptional condition.
- CWE-770 - Allocation of Resources Without Limits or ThrottlingThe software allocates a reusable resource or group of resources on behalf of an actor without imposing any restrictions on the size or number of resources that can be allocated, in violation of the intended security policy for that actor.