Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 24/01/2024 Updated: 31/01/2024

CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9

VMScore: 0

Buffer over-read vulnerability in Contiki-NG tinyDTLS through master branch 53a0d97 allows attackers obtain sensitive information via crafted input to dtls_ccm_decrypt_message().

Vulnerable Product	Search on Vulmon	Subscribe to Product
contiki-ng contiki-ng tinydtls

[Suggested description] An issue was discovered in Contiki-NG tinyDTLS through 2018-08-30 Incorrect handling of over-large packets in dtls_ccm_decrypt_message() causes a buffer over-read that can expose sensitive information [Vulnerability Type] Buffer Overflow [Vendor of Product] githubcom/contiki-ng/tinydtls [Affected Product Code ...

CWE-125 https://seclists.org/fulldisclosure/2024/Jan/17 https://nvd.nist.gov https://seclists.org/fulldisclosure/2024/Jan/17

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2021-42144

Vulnerability Summary

Mailing Lists

References

Vulmon Search

About

Products

Connect