Lucene search
GoogleOSV:CVE-2020-27222HistoryFeb 03, 2021 - 4:15 p.m.
CVE-2020-27222
2021-02-0316:15:13
Google
osv.dev
6
In Eclipse Californium version 2.3.0 to 2.6.0, the certificate based (x509 and RPK) DTLS handshakes accidentally fails, because the DTLS server side sticks to a wrong internal state. That wrong internal state is set by a previous certificate based DTLS handshake failure with TLS parameter mismatch. The DTLS server side must be restarted to recover this. This allow clients to force a DoS.
| CPE | Name | Operator | Version |
|---|---|---|---|
| californium | eq | 2.4.0 | |
| californium | eq | 2.3.0 | |
| californium | eq | 2.6.0 | |
| californium | eq | 2.5.0 |
Related
prion
prion
Code injection
2021-02-03 16:15:00
nvd
nvd
CVE-2020-27222
2021-02-03 16:15:13
redhatcve
redhatcve
CVE-2020-27222
2021-03-01 13:33:27
veracode
veracode
Denial Of Service (DoS)
2021-02-04 06:07:28
cve
cve
CVE-2020-27222
2021-02-03 16:15:13
cvelist
cvelist
CVE-2020-27222
2021-02-03 15:45:13
redhat
redhat