Lucene search
+L

69 matches found

NVD
NVD
added 2021/07/08 3:15 a.m.33 views

CVE-2021-34430

Eclipse TinyDTLS through 0.9-rc1 relies on the rand function in the C library, which makes it easier for remote attackers to compute the master key and then decrypt DTLS traffic...

7.5CVSS0.01045EPSS
SaveExploits1References1
OSV
OSV
added 2021/07/08 3:15 a.m.20 views

CVE-2021-34430

Eclipse TinyDTLS through 0.9-rc1 relies on the rand function in the C library, which makes it easier for remote attackers to compute the master key and then decrypt DTLS traffic...

7.5CVSS7AI score
SaveExploits0References1
Prion
Prion
added 2021/07/08 3:15 a.m.20 views

Open redirect

Eclipse TinyDTLS through 0.9-rc1 relies on the rand function in the C library, which makes it easier for remote attackers to compute the master key and then decrypt DTLS traffic...

5CVSS7.5AI score0.01045EPSS
SaveExploits1References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2021/07/08 3:15 a.m.5 views

CVE-2021-34430

Eclipse TinyDTLS through 0.9-rc1 relies on the rand function in the C library, which makes it easier for remote attackers to compute the master key and then decrypt DTLS traffic...

7.5CVSS7.1AI score0.01045EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2021/07/08 3:00 a.m.35 views

CVE-2021-34430

Eclipse TinyDTLS through 0.9-rc1 relies on the rand function in the C library, which makes it easier for remote attackers to compute the master key and then decrypt DTLS traffic...

7.7AI score0.01045EPSS
SaveExploits1References1
CVE
CVE
added 2021/07/08 3:00 a.m.108 views

CVE-2021-34430

The CVE-2021-34430 entry concerns the Eclipse TinyDTLS library. Affected component: TinyDTLS up to version 0.9-rc1. Root cause: reliance on the C library’s rand function, which enables remote attackers to compute the DTLS master key and decrypt traffic. Impact: confidentiality of DTLS communicati...

7.5CVSS7.5AI score0.01045EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
added 2021/07/07 12:00 a.m.9 views

Eclipse TinyDTLS 加密问题漏洞

Eclipse TinyDTLS is a library for Datagram Transport Layer Security DTLS.Eclipse TinyDTLS is vulnerable to an encryption issue that could be exploited by an attacker to compute a key to decrypt DTLS communications...

7.5CVSS5.5AI score0.01045EPSS
SaveExploits1References3
CNVD
CNVD
added 2017/05/24 12:00 a.m.9 views

Eclipse tinydtls for Eclipse IoT Denial of Service Vulnerability

Eclipse IoT is a free and open source used by the Eclipse Foundation to co-build IoT projects based on open technologies.Eclipse tinydtls is a library for overlaying the Data Security Transport Layer DTLS of the Client and Data State Server. A security vulnerability exists in version 0.8.2 of...

7.5CVSS6.8AI score0.01712EPSS
SaveExploits0References1
CVE
CVE
added 2017/03/24 3:00 p.m.47 views

CVE-2017-7243

Eclipse tinydtls 0.8.2 for Eclipse IoT is vulnerable to a denial-of-service via a remote attacker sending a Change cipher spec packet without a pre-handshake, causing the DTLS peer to crash. The affected component is the tinydtls library used by Eclipse IoT; the root cause is improper handling of...

7.5CVSS7.4AI score0.01712EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder