CVE-2021-34430 | BDVDB-2026-156552 Detail

The Eclipse FoundationEclipse TinyDTLS

Description#

Eclipse TinyDTLS through 0.9-rc1 relies on the rand function in the C library, which makes it easier for remote attackers to compute the master key and then decrypt DTLS traffic.

Impact#

No impact statement in the source data.

Weaknesses#

CWE-338 Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

References#

https://bugs.eclipse.org/bugs/show_bug.cgi?id=568803

Exploit#

No public exploit known

History#

Version 12021-07-08Record published in the CVE List.
Version 22024-08-04Most recent update recorded in the CVE List.