Wind River Support Network

HomeDefectsLIN5-21918
Fixed

LIN5-21918 : Security Advisory - openssl - CVE-2016-2181

Created: Sep 1, 2016    Updated: May 29, 2018
Resolved Date: Sep 7, 2016
Found In Version: 5.0.1.36
Fix Version: 5.0.1.38
Severity: Standard
Applicable for: Wind River Linux 5
Component/s: Userspace

Description

It was found that when doing handshake/renegotiation, it's possible to bypass DTLS replay protection by sending a record for the next epoch (which does not have to decrypt or have a valid MAC), with a very large sequence number. This means the right hand edge of the window is moved very far to the right, and all subsequent legitimate packets are dropped causing a denial of service. 

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2181

Security Notices


Other Downloads


Live chat
Online