Contiki-ng Tinydtls 2018-08-30
Approved changes feed: RSS · Atom
cpe:2.3:a:contiki-ng:tinydtls:2018-08-30:*:*:*:*:*:*:*
part: a version: 2018-08-30 update: *
| Vendor | Contiki Ng (d6c3e92f-926f-5c64-9991-9584713f46f2) |
|---|---|
| Product | Tinydtls (50080c38-dfed-547d-b4c2-a8b4cc1e0473) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/contiki-ng/tinydtls |
purl2cpe | 2026-06-01 10:11:07.432632 |
pkg:sourceforge/tinydtls |
purl2cpe | 2026-06-01 10:11:07.432633 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-42147 |
vulnerable | 2026-06-08 05:35:21.921039 |
Details available
Buffer over-read vulnerability in the dtls_sha256_update function in Contiki-NG tinyDTLS through master branch 53a0d97 allows remote attackers to cause a denial of service via crafted data packet.
Published: 2024-01-24T00:00:00.000Z
Updated: 2025-05-30T14:17:01.233Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-42146 |
vulnerable | 2026-06-08 05:35:21.920483 |
Details available
An issue was discovered in Contiki-NG tinyDTLS through master branch 53a0d97. DTLS servers allow remote attackers to reuse the same epoch number within two times the TCP maximum segment lifetime, which is prohibited in RFC6347. This vulnerability allows remote attackers to obtain sensitive application (data of connected clients).
Published: 2024-01-24T00:00:00.000Z
Updated: 2025-06-20T19:19:37.327Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.