Unknown · Contiki-Ng · CVE-2021-42141
**Name of the Vulnerable Software and Affected Versions**
Contiki-NG tinyDTLS versions through 2018-08-30
**Description**
An issue was discovered where one incorrect handshake could complete with different epoch numbers in the packets `Client Hello`, `Client key exchange`, and `Change cipher spec`, which may cause denial of service.
**Recommendations**
For Contiki-NG tinyDTLS versions through 2018-08-30, consider applying configuration changes to prevent incorrect handshakes with different epoch numbers, such as validating epoch numbers in the `Client Hello`, `Client key exchange`, and `Change cipher spec` packets.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.