CyberSecBulletin

Eclipse-californium vulnerabilities

We track 1 vulnerability in Eclipse-californium products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on November 10, 2022.

1vulnerabilities
0critical
1high
0exploited
8.2average CVSS score

Latest Eclipse-californium vulnerabilities

  • 8.2 High severity

    californium: Improper Resource Shutdown or Release

    CVE-2022-39368Eclipse-californium

    Eclipse Californium is a Java implementation of RFC7252 - Constrained Application Protocol for IoT Cloud services. In versions prior to 3.7.0, and 2.7.4, Californium is vulnerable to a Denial of Service. Failing handshakes don't cleanup counters for throttling