CVE-2022-2576

HIGH Year: 2022
CVSS v3 Score
7.5
High
Weakness Type
CWE-408
View all →

Vulnerability Description

In Eclipse Californium version 2.0.0 to 2.7.2 and 3.0.0-3.5.0 a DTLS resumption handshake falls back to a DTLS full handshake on a parameter mismatch without using a HelloVerifyRequest. Especially, if used with certificate based cipher suites, that results in message amplification (DDoS other peers) and high CPU load (DoS own peer). The misbehavior occurs only with DTLS_VERIFY_PEERS_ON_RESUMPTION_THRESHOLD values larger than 0.

Related Vulnerabilities

CVE-2020-1657

HIGH
CVSS:7.5(High)

On SRX Series devices, a vulnerability in the key-management-daemon (kmd) daemon of Juniper Networks Junos OS allows an attacker to spoof packets targeted to IPSec peers before a security association ...

CWE-4082020

CVE-2020-1657

HIGH
CVSS:7.5(High)

On SRX Series devices, a vulnerability in the key-management-daemon (kmd) daemon of Juniper Networks Junos OS allows an attacker to spoof packets targeted to IPSec peers before a security association ...

CWE-4082020