Eclipse TinyDTLS through 0.9-rc1 relies on the rand function in the C library, which makes it easier for remote attackers to compute the master key and then decrypt DTLS traffic.
CPE | Name | Operator | Version |
---|---|---|---|
tinydtls | eq | initial_contribution | |
tinydtls | eq | 0.9-rc1 |