9.1
CVSSv3

CVE-2021-42147

Published: 24/01/2024 Updated: 01/02/2024
CVSS v3 Base Score: 9.1 | Impact Score: 5.2 | Exploitability Score: 3.9
VMScore: 0

Vulnerability Summary

Buffer over-read vulnerability in the dtls_sha256_update function in Contiki-NG tinyDTLS through master branch 53a0d97 allows remote malicious users to cause a denial of service via crafted data packet.

Vulnerable Product Search on Vulmon Subscribe to Product

contiki-ng tinydtls 2018-08-30

Mailing Lists

[Suggested description] An issue was discovered in Contiki-NG tinyDTLS through 2018-08-30 A buffer over-read exists in the dtls_sha256_update function This bug allows remote attackers to cause a denial of service (crash) and possibly read sensitive information by sending a malformed packet with an over-large fragment length field, due to server ...