CVE-2021-42143 — n/a / n/a

Description (CNA)

An issue was discovered in Contiki-NG tinyDTLS through master branch 53a0d97. An infinite loop bug exists during the handling of a ClientHello handshake message. This bug allows remote attackers to cause a denial of service by sending a malformed ClientHello handshake message with an odd length of cipher suites, which triggers an infinite loop (consuming all resources) and a buffer over-read that can disclose sensitive information.

Affected (CNA)

Vendor / product	Versions
n/a / n/a	affected n/a

CWE

No CWE identifiers supplied.

References

https://seclists.org/fulldisclosure/2024/Jan/16

ADP enrichment

CVE

No English description supplied.

http://seclists.org/fulldisclosure/2024/Jan/16
https://seclists.org/fulldisclosure/2024/Jan/16

CISA-ADP

No English description supplied.

No references supplied.