CVE-2021-42147

2024-01-2400:00:00

mitre

www.cve.org

cve-2021-42147

buffer over-read

contiki-ng

tinydtls

denial of service

crafted data packet

AI Score

Confidence

High

EPSS

0.001

Percentile

48.6%

JSON

Buffer over-read vulnerability in the dtls_sha256_update function in Contiki-NG tinyDTLS through master branch 53a0d97 allows remote attackers to cause a denial of service via crafted data packet.

References

seclists.org/fulldisclosure/2024/Jan/20