Buffer overflow

2024-01-2418:15:00

PRIOn knowledge base

www.prio-n.com

buffer overflow

contiki-ng

tinydtls

vulnerability

crafted input

sensitive information

6.6 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

38.1%

JSON

Buffer over-read vulnerability in Contiki-NG tinyDTLS through master branch 53a0d97 allows attackers obtain sensitive information via crafted input to dtls_ccm_decrypt_message().

CPENameOperatorVersion
contiki-ng_tinydtlseq<= 2018830

CPE	Name	Operator	Version
	contiki-ng_tinydtls	eq	<= 2018830

References

seclists.org/fulldisclosure/2024/Jan/17