CVE-2021-34430

2021-07-0803:15:07

Google

osv.dev

eclipse tinydtls

insecure rand function

remote attackers

decrypt dtls traffic

AI Score

Confidence

Low

EPSS

0.009

Percentile

82.4%

JSON

Eclipse TinyDTLS through 0.9-rc1 relies on the rand function in the C library, which makes it easier for remote attackers to compute the master key and then decrypt DTLS traffic.

References

bugs.eclipse.org/bugs/show_bug.cgi?id=568803