33 matches found
Eclipse TinyDTLS 加密问题漏洞
Eclipse TinyDTLS is a library for Datagram Transport Layer Security DTLS.Eclipse TinyDTLS is vulnerable to an encryption issue that could be exploited by an attacker to compute a key to decrypt DTLS communications...
Eclipse Californium 安全漏洞
Eclipse Californium is a Java-based codebase from the Eclipse Foundation that provides Coap back-end support for the Internet of Things. A security vulnerability exists in Eclipse Californium versions 2.3.0 through 2.6.0, which stems from DTLS server-side persistence of incorrect internal state. ...
Attackers Abusing Citrix NetScaler Devices to Launch Amplified DDoS Attacks
Citrix has issued an emergency advisory warning its customers of a security issue affecting its NetScaler application delivery controller ADC devices that attackers are abusing to launch amplified distributed denial-of-service DDoS attacks against several targets. "An attacker or bots can overwhe...
EulerOS 2.0 SP3 : openssl098e (EulerOS-SA-2020-1420)
According to the version of the openssl098e package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - The DTLS implementation in OpenSSL before 1.1.0 does not properly restrict the lifetime of queue entries associated with unused out-of-order...
PT-2019-13692 · Matrixssl · Matrixssl
Name of the Vulnerable Software and Affected Versions: MatrixSSL versions 3.8.3 Open through 4.2.1 Open Description: The issue arises from the DTLS server's mishandling of incoming network messages, leading to a heap-based buffer overflow of up to 256 bytes. This can result in possible Remote Cod...
F5 Networks BIG-IP : BIG-IP APM DTLS vulnerability (K97241515)
When processing fragmentedClientHello messages in a DTLS session TMM may corrupt memory eventually leading to a crash. Only systems offering DTLS connections via APM are impacted. CVE-2019-6596 Impact This vulnerability may allow an attacker to cause a denial-of-service DoS on the affected BIG-IP...
Security Bulletin: IBM Tealeaf Customer Experience (CX) is affected by a vulnerability in OpenSSL (CVE-2014-0160)
Summary A security vulnerability has been discovered in OpenSSL. Vulnerability Details CVE-ID: CVE-2014-0160 DESCRIPTION: OpenSSL could allow a remote attacker to obtain sensitive information, caused by an error in the TLS/DTLS heartbeat functionality. An attacker could exploit this vulnerability...
UBUNTU-CVE-2014-8176
The dtls1clearqueues function in ssl/d1lib.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h frees data structures without considering that application data can arrive between a ChangeCipherSpec message and a Finished message, which allows remote DTLS peers to cause a deni...
Code injection
The dtls1listen function in d1lib.c in OpenSSL 1.0.2 before 1.0.2a does not properly isolate the state information of independent data streams, which allows remote attackers to cause a denial of service application crash via crafted DTLS traffic, as demonstrated by DTLS 1.0 traffic to a DTLS 1.2...
CVE-2014-3507
Memory leak in d1both.c in the DTLS implementation in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before 1.0.0n, and 1.0.1 before 1.0.1i allows remote attackers to cause a denial of service memory consumption via zero-length DTLS fragments that trigger improper handling of the return value of a certain...
CVE-2011-4108
The DTLS implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f performs a MAC check only if certain padding is valid, which makes it easier for remote attackers to recover plaintext via a padding oracle attack...
USN-534-1: OpenSSL vulnerability
Andy Polyakov discovered that the DTLS implementation in OpenSSL was vulnerable. A remote attacker could send a specially crafted connection request to services using DTLS and execute arbitrary code with the service's privileges. There are no known Ubuntu applications that are currently using DTL...