CVE-2021-34430

Name of the Vulnerable Software and Affected Versions Eclipse TinyDTLS versions through 0.9-rc1

Description The issue is related to errors in the pseudorandom number generator code. This makes it easier for remote attackers to compute the master key and then decrypt DTLS traffic, potentially allowing them to reveal protected information.

Recommendations For Eclipse TinyDTLS versions through 0.9-rc1, consider updating to a version that does not rely on the rand function in the C library for pseudorandom number generation, as this would mitigate the risk of master key computation and DTLS traffic decryption by remote attackers. At the moment, there is no information about a newer version that contains a fix for this vulnerability.