Lucene search
+L

1 matches found

OSV
OSV
added 2022/07/30 12:0 a.m.12 views

GHSA-QQ3J-44GW-CF6R Eclipse Californium denial of service (DoS) via Datagram Transport Layer Security (DTLS) handshake on parameter mismatch

In Eclipse Californium versions 2.0.0 to 2.7.2 and 3.0.0-3.5.0 a DTLS resumption handshake falls back to a DTLS full handshake on a parameter mismatch without using a HelloVerifyRequest. Especially, if used with certificate based cipher suites, that results in message amplification DDoS other pee...

7.5CVSS7.1AI score0.00576EPSS
SaveExploits1References6
Rows per page
Query Builder