CVE-2021-34430: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

Eclipse TinyDTLS through 0.9-rc1 relies on the rand function in the C library, which makes it easier for remote attackers to compute the master key and then decrypt DTLS traffic...

Eclipse TinyDTLS encryption issue vulnerabilities

Eclipse TinyDTLS is a library for Datagram Transport Layer Security DTLS.Eclipse TinyDTLS is vulnerable to an encryption issue that could be exploited by an attacker to compute a key to decrypt DTLS communications...

PT-2020-6333

Name of the Vulnerable Software and Affected Versions Eclipse TinyDTLS versions through 0.9-rc1 Description The issue is related to errors in the pseudorandom number generator code. This makes it easier for remote attackers to compute the master key and then decrypt DTLS traffic, potentially...

Eclipse tinydtls for Eclipse IoT Denial of Service Vulnerability

Eclipse IoT is a free and open source used by the Eclipse Foundation to co-build IoT projects based on open technologies.Eclipse tinydtls is a library for overlaying the Data Security Transport Layer DTLS of the Client and Data State Server. A security vulnerability exists in version 0.8.2 of...

CVE-2017-7243

Eclipse tinydtls 0.8.2 for Eclipse IoT is vulnerable to a denial-of-service via a remote attacker sending a Change cipher spec packet without a pre-handshake, causing the DTLS peer to crash. The affected component is the tinydtls library used by Eclipse IoT; the root cause is improper handling of...

CVE-2017-7243: NULL Pointer Dereference

Eclipse tinydtls 0.8.2 for Eclipse IoT allows remote attackers to cause a denial of service DTLS peer crash by sending a "Change cipher spec" packet without pre-handshake...

PT-2017-17604

Name of the Vulnerable Software and Affected Versions Eclipse tinydtls version 0.8.2 Description The issue allows remote attackers to cause a denial of service by sending a "Change cipher spec" packet without pre-handshake, resulting in a DTLS peer crash. Recommendations For Eclipse tinydtls...