In Eclipse Californium version 2.3.0 to 2.6.0, the certificate based (x509 and RPK) DTLS handshakes accidentally fails, because the DTLS server side sticks to a wrong internal state. That wrong internal state is set by a previous certificate based DTLS handshake failure with TLS parameter mismatch. The DTLS server side must be restarted to recover this. This allow clients to force a DoS.
Weakness
The product does not properly determine which state it is in, causing it to assume it is in state X when in fact it is in state Y, causing it to perform incorrect operations in a security-relevant manner.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Californium | Eclipse | 2.3.0 (including) | 2.6.0 (including) |
| Red Hat Integration | RedHat | * | |
| Red Hat Integration Camel Quarkus 2 | RedHat | * |