Wind River Support Network


LIN7-6760 : Security Advisory - openssl - CVE-2016-2181

Created: Sep 1, 2016    Updated: Sep 8, 2018
Resolved Date: Sep 7, 2016
Found In Version: 7.0
Fix Version:
Severity: Standard
Applicable for: Wind River Linux 7
Component/s: Userspace


It was found that when doing handshake/renegotiation, it's possible to bypass DTLS replay protection by sending a record for the next epoch (which does not have to decrypt or have a valid MAC), with a very large sequence number. This means the right hand edge of the window is moved very far to the right, and all subsequent legitimate packets are dropped causing a denial of service. 

Security Notices

Other Downloads


Live chat