CVE-2022-2576 - In Eclipse Californium version 2.0.0 to 2.7.2 and 3.0.0-3.5.0 a DTLS resumption handshake falls back to a DTLS full handshake on a parameter mismatch without using a HelloVerifyRequest

Back Back to CVE browser

HIGH

In Eclipse Californium version 2.0.0 to 2.7.2 and 3.0.0-3.5.0 a DTLS resumption handshake falls back to a DTLS full handshake on a parameter mismatch without using a HelloVerifyRequest

Published Jul 29, 2022

7.5

HIGH

CVSS 3.1

EPSS 0.59%

Description

In Eclipse Californium version 2.0.0 to 2.7.2 and 3.0.0-3.5.0 a DTLS resumption handshake falls back to a DTLS full handshake on a parameter mismatch without using a HelloVerifyRequest. Especially, if used with certificate based cipher suites, that results in message amplification (DDoS other peers) and high CPU load (DoS own peer). The misbehavior occurs only with DTLS_VERIFY_PEERS_ON_RESUMPTION_THRESHOLD values larger than 0.

Affected products

Vendor The Eclipse Foundation Product Eclipse Californium Default
n/a
- Version
  2.0.0
  Status
  affected
  Constraints
  <unspecified
- Version
  3.0.0
  Status
  affected
  Constraints
  <unspecified
- Version
  unspecified
  Status
  affected
  Constraints
  <=2.7.2
- Version
  unspecified
  Status
  affected
  Constraints
  <=3.5.0

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

The Eclipse Foundation

Eclipse Californium

n/a

Version	Status	Constraints
2.0.0	affected	<unspecified
3.0.0	affected	<unspecified
unspecified	affected	<=2.7.2
unspecified	affected	<=3.5.0

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-408

References (7)

https://bugs.eclipse.org/580018
x_refsource_CONFIRMExploitIssue TrackingVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-6404
Advisory
https://github.com/advisories/GHSA-qq3j-44gw-cf6r
Advisory
https://github.com/eclipse-californium/californium/commit/0cc953a1dc071efc960130e229fcb4f8bda7f9df
https://github.com/eclipse-californium/californium/commit/8373db84b2d07f22c39ffc333ab881dba9401722
https://github.com/eclipse-californium/californium/pull/2039
https://nvd.nist.gov/vuln/detail/CVE-2022-2576

Link	Providers	Tags
https://bugs.eclipse.org/580018		x_refsource_CONFIRMExploitIssue TrackingVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-6404		Advisory
https://github.com/advisories/GHSA-qq3j-44gw-cf6r		Advisory
https://github.com/eclipse-californium/californium/commit/0cc953a1dc071efc960130e229fcb4f8bda7f9df
https://github.com/eclipse-californium/californium/commit/8373db84b2d07f22c39ffc333ab881dba9401722
https://github.com/eclipse-californium/californium/pull/2039
https://nvd.nist.gov/vuln/detail/CVE-2022-2576