CVE-2017-7243

2017-03-2415:59:01

Google

osv.dev

7 High

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

76.9%

JSON

Eclipse tinydtls 0.8.2 for Eclipse IoT allows remote attackers to cause a denial of service (DTLS peer crash) by sending a “Change cipher spec” packet without pre-handshake.

References

www.securityfocus.com/bid/97193

gist.github.com/k1rh4/25dcb124aef2a8a2a5f4677d64d1998b

github.com/k1rh4/CVE/blob/master/tinydtls