Buffer overflow in DTLS server - #VU19550
Published: July 29, 2019
Vulnerability identifier: #VU19550
CSH Severity: Medium
CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: N/A
CWE-ID: CWE-120
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to crash the target server.
The vulnerability exists in the "dtls_create_cookie" function due to a boundary error when the server incorrectly handles incoming network. A remote attacker can send a specially crafted request to the affected system, trigger buffer overflow and crash the target server.
Affected software
DTLS server
Remediation
Cybersecurity Help is currently unaware of any official solution to address this vulnerability.