Threats tagged 'ghsa-6w84-hw79-7wgf'

A vulnerability in the DTLS retransmission logic causes improper handling of suspended handshake message writes. This can lead to out-of-bounds reads where retransmitted messages disclose heap memory as plaintext or cause crashes resulting in denial of service. The issue arises because retransmission reuses internal buffers without resetting read positions and overwrites state needed to resume suspended writes. The fix involves resetting the read position and deferring retransmission if a handshake write is suspended.