---

CVE-2016-2181 - log back

CVE-2016-2181 created at 25 Sep 2019 19:31:40
Severity	+ Low
Remote	+ Remote
Type	+ Denial of service
Description	+ A flaw in the DTLS replay attack protection mechanism means that records that arrive for future epochs update the replay protection "window" before the MAC for the record has been validated. This could be exploited by an attacker by sending a record for the next epoch (which does not have to decrypt or have a valid MAC), with a very large sequence number. This means that all subsequent legitimate packets are dropped causing a denial of service for a specific DTLS connection.
References	+ https://www.openssl.org/news/secadv/20160922.txt
Notes