Wind River Support Network


LIN5-21918 : Security Advisory - openssl - CVE-2016-2181

Created: Sep 1, 2016    Updated: May 29, 2018
Resolved Date: Sep 7, 2016
Found In Version:
Fix Version:
Severity: Standard
Applicable for: Wind River Linux 5
Component/s: Userspace


It was found that when doing handshake/renegotiation, it's possible to bypass DTLS replay protection by sending a record for the next epoch (which does not have to decrypt or have a valid MAC), with a very large sequence number. This means the right hand edge of the window is moved very far to the right, and all subsequent legitimate packets are dropped causing a denial of service.

Security Notices

Other Downloads

Live chat