Buffer overflow in DTLS server - #VU19549
Published: July 29, 2019
Vulnerability identifier: #VU19549
CSH Severity: Medium
CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: N/A
CWE-ID: CWE-120
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to crash the target server.
The vulnerability exists in the "dtls_update_parameters" function due to a boundary error when the server incorrectly handles incoming network messages. A remote attacker can send a specially crafted request to the affected system, trigger buffer overflow and crash the target server.
Affected software
DTLS server
Remediation
Cybersecurity Help is currently unaware of any official solution to address this vulnerability.