Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

wrong packets drops #24

Open
jerrytesting opened this issue Oct 10, 2021 · 1 comment
Open

wrong packets drops #24

jerrytesting opened this issue Oct 10, 2021 · 1 comment

Comments

@jerrytesting
Copy link

In the master branch 53a0d97, DTLS servers mishandle the early use of a large epoch number. This vulnerability allows remote attackers to cause a denial of service and false-positive packet drops.

This vulnerability could be reproduced by sending packets to complete two times of handshakes. The epoch number in the first handshake is larger than that in the second handshake; however, servers still could allow completing these handshakes. The following shows the packets captured by Wireshark.
epoch

@boaks
Copy link

boaks commented Feb 7, 2024

See eclipse/tinydtls issue #13

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants