Denial Of Service (DoS)

2022-07-1810:58:03

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

mbedtls

vulnerability

denial of service

buffer overread

dtls

server

client hello

crash

information disclosure

error output

software

EPSS

0.001

Percentile

48.7%

JSON

mbedtls is vulnerable to denial of service. The vulnerability exists through a buffer overread when the dtls server with MBEDTLS_SSL_DTLS_CLIENT_PORT_REUSE in use receives a ClientHello message with a cookie whose declared length exceeds the end of the allocated buffer which allows an attacker to cause a crash or information disclosure via error output