Skip to content
OpenAdvisories
Unscored CVE-2021-34430 EUVD-2021-21086GHSA-ffg3-3xwj-f92r

Eclipse TinyDTLS through 0.9-rc1 relies on the rand function in the C library, which makes it easier for remote attackers to compute the ma…

Published Jul 8, 2021 · Updated Aug 4, 2024 · Assigned by eclipse

Description

Eclipse TinyDTLS through 0.9-rc1 relies on the rand function in the C library, which makes it easier for remote attackers to compute the master key and then decrypt DTLS traffic.

Affected products

VendorProductAffectedFixed
The Eclipse Foundation Eclipse TinyDTLS unspecified – ≤ 0.9-rc1 —

References