Wind River Support Network


LIN8-4617 : Security Advisory - openssl - CVE-2016-2181

Created: Sep 1, 2016    Updated: Dec 3, 2018
Resolved Date: Sep 11, 2016
Found In Version: 8.0
Fix Version:
Severity: Standard
Applicable for: Wind River Linux 8
Component/s: Userspace


It was found that when doing handshake/renegotiation, it's possible to bypass DTLS replay protection by sending a record for the next epoch (which does not have to decrypt or have a valid MAC), with a very large sequence number. This means the right hand edge of the window is moved very far to the right, and all subsequent legitimate packets are dropped causing a denial of service.

Security Notices

Other Downloads


Live chat