CVE-2021-42142

2024-01-2300:00:00

mitre

www.cve.org

contiki-ng

tinydtls

vulnerability

denial of service

remote attacks

false-positive packet drops

AI Score

9.3

Confidence

High

EPSS

0.001

Percentile

51.0%

JSON

An issue was discovered in Contiki-NG tinyDTLS through master branch 53a0d97. DTLS servers mishandle the early use of a large epoch number. This vulnerability allows remote attackers to cause a denial of service and false-positive packet drops.

References

github.com/contiki-ng/tinydtls/issues/24

seclists.org/fulldisclosure/2024/Jan/15