#VU19550 Buffer overflow in DTLS server

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU19550

#VU19550 Buffer overflow in DTLS server

Published: July 29, 2019


Vulnerability identifier: #VU19550
Vulnerability risk: Medium
CVSSv4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green
CVE-ID: N/A
CWE-ID: CWE-120
Exploitation vector: Remote access
Exploit availability: No public exploit available
Vulnerable software:
DTLS server
Software vendor:
Eclipse

Description

The vulnerability allows a remote attacker to crash the target server.

The vulnerability exists in the "dtls_create_cookie" function due to a boundary error when the server incorrectly handles incoming network. A remote attacker can send a specially crafted request to the affected system, trigger buffer overflow and crash the target server.


Remediation

Cybersecurity Help is currently unaware of any official solution to address this vulnerability.

External links