CVE-2021-42141: Contiki-NG Tinydtls

Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days.

An issue was discovered in Contiki-NG tinyDTLS through 2018-08-30. One incorrect handshake could complete with different epoch numbers in the packets Client_Hello, Client_key_exchange, and Change_cipher_spec, which may cause denial of service.

Affected products

• Contiki-NG Tinydtls: up to and including 2018-08-30

Published 2024-01-22. Last modified 2026-06-17.