Eclipse Tinydtls vulnerabilities

2 vulnerabilities

Known vulnerabilities in Eclipse Tinydtls, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.5CVE-2021-34430eclipsetinydtls+1
EPSS score
1.04%
Eclipse TinyDTLS through 0.9-rc1 relies on the rand function in the C library, which makes it easier for remote attackers to compute the master key and then decrypt DTLS traffic.7.5CVE-2017-7243eclipsetinydtls
EPSS score
1.81%
Eclipse tinydtls 0.8.2 for Eclipse IoT allows remote attackers to cause a denial of service (DTLS peer crash) by sending a "Change cipher spec" packet without pre-handshake.