HIGH🇵🇱 Wersja polska

CVE-2021-42146

CVSS 7.5v3.1pub. 2024-01-24upd. 2025-06-20

An issue was discovered in Contiki-NG tinyDTLS through master branch 53a0d97. DTLS servers allow remote attackers to reuse the same epoch number within two times the TCP maximum segment lifetime, which is prohibited in RFC6347. This vulnerability allows remote attackers to obtain sensitive application (data of connected clients).

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

  • Contiki Ng Tinydtls

    APP
    Contiki-Ng
    2018-08-30
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2021-42143CRITICAL9.1PL ✓same product

Nieskończona pętla i buffer over-read w Contiki-NG tinyDTLS (DTLS ClientHello)

CVE-2021-42147CRITICAL9.1PL ✓same product

Buffer over-read w Contiki-NG tinyDTLS — zdalne DoS przez spreparowany pakiet

CVE-2021-42142CRITICAL9.8PL ✓same product

Nieprawidłowa obsługa dużego numeru epoki w Contiki-NG tinyDTLS — DoS i fałszywe odrzucanie pakietów

CVE-2021-42141CRITICAL9.8PL ✓same product

Błąd obsługi handshake DTLS w Contiki-NG tinyDTLS — denial of service

CVE-2021-42145HIGH7.5same product

An assertion failure discovered in in check_certificate_request() in Contiki-NG tinyDTLS through master branch...