Read Time:22 Second
Posted by Meng Ruijie on Jan 17
[Suggested description]
An issue was discovered in Contiki-NG tinyDTLS through 2018-08-30. Incorrect handling of over-large packets in
dtls_ccm_decrypt_message() causes a buffer over-read that can expose sensitive information.
[Vulnerability Type]
Buffer Overflow
[Vendor of Product]
https://github.com/contiki-ng/tinydtls
[Affected Product Code Base]
contiki-ng tinydtls – master branch 53a0d97
[Affected Component]
the service of dtls servers…