Contiki-ng
Contiki-ng Tinydtls: vulnerabilidades y CVE
Contiki-ng Tinydtls tiene 6 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 4 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE6
Últimos 12 meses0
Críticas4
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2021-42147 | Crítica (9.1) | 0.84% | — | 24 ene 2024 | Buffer over-read vulnerability in the dtls_sha256_update function in Contiki-NG tinyDTLS through master branch 53a0d97 allows remote attackers to cause a denial of service via crafted data packet. |
| CVE-2021-42146 | Alta (7.5) | 0.66% | — | 24 ene 2024 | An issue was discovered in Contiki-NG tinyDTLS through master branch 53a0d97. DTLS servers allow remote attackers to reuse the same epoch number within two times the TCP maximum segment lifetime, which is prohibited in… |
| CVE-2021-42145 | Alta (7.5) | 0.43% | — | 24 ene 2024 | An assertion failure discovered in in check_certificate_request() in Contiki-NG tinyDTLS through master branch 53a0d97 allows attackers to cause a denial of service. |
| CVE-2021-42143 | Crítica (9.1) | 0.81% | — | 24 ene 2024 | An issue was discovered in Contiki-NG tinyDTLS through master branch 53a0d97. An infinite loop bug exists during the handling of a ClientHello handshake message. This bug allows remote attackers to cause a denial of… |
| CVE-2021-42142 | Crítica (9.8) | 0.99% | — | 23 ene 2024 | An issue was discovered in Contiki-NG tinyDTLS through master branch 53a0d97. DTLS servers mishandle the early use of a large epoch number. This vulnerability allows remote attackers to cause a denial of service and… |
| CVE-2021-42141 | Crítica (9.8) | 1.2% | — | 22 ene 2024 | An issue was discovered in Contiki-NG tinyDTLS through 2018-08-30. One incorrect handshake could complete with different epoch numbers in the packets Client_Hello, Client_key_exchange, and Change_cipher_spec, which may… |