HIGH🇵🇱 Wersja polska

CVE-2021-42146

CVSS 7.5v3.1pub. 2024-01-24upd. 2025-06-20

An issue was discovered in Contiki-NG tinyDTLS through master branch 53a0d97. DTLS servers allow remote attackers to reuse the same epoch number within two times the TCP maximum segment lifetime, which is prohibited in RFC6347. This vulnerability allows remote attackers to obtain sensitive application (data of connected clients).

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

  • Contiki Ng Tinydtls

    APP
    Contiki-Ng
    2018-08-30
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2021-42143CRITICAL9.1PL ✓ten sam produkt

Nieskończona pętla i buffer over-read w Contiki-NG tinyDTLS (DTLS ClientHello)

CVE-2021-42147CRITICAL9.1PL ✓ten sam produkt

Buffer over-read w Contiki-NG tinyDTLS — zdalne DoS przez spreparowany pakiet

CVE-2021-42142CRITICAL9.8PL ✓ten sam produkt

Nieprawidłowa obsługa dużego numeru epoki w Contiki-NG tinyDTLS — DoS i fałszywe odrzucanie pakietów

CVE-2021-42141CRITICAL9.8PL ✓ten sam produkt

Błąd obsługi handshake DTLS w Contiki-NG tinyDTLS — denial of service

CVE-2021-42145HIGH7.5ten sam produkt

An assertion failure discovered in in check_certificate_request() in Contiki-NG tinyDTLS through master branch...