Erlang/OTP DTLS Cookie Bypass Vulnerability (CVE-2024-54887)

Vulnerability Overview Vulnerability Name: DTLS Cookie Bypass During Startup Description: In the Erlang/OTP project, the initial was hardcoded into the entry binary. Because HMAC with an empty key is deterministic and predictable, anyone aware of the HMAC algorithm and the content can calculate (including IP, port, and Hello parameters) and forge a valid cookie, bypassing the first cookie rotation value. Affected Versions Affected Versions: - OTP: >= 20.0 - ssl (OTP): >= 8.2 Fixed Versions: - OTP: 29.0.3, 28.5.0.3, 27.3.4.14 - ssl (OTP): 11.7.3, 11.6.0.3, 11.2.12.10 Remediation Mitigation: Upgrade to the fixed versions listed above. Specific Fix Details: Setting the initial cookie to an empty binary in the code was introduced in OTP-20; however, previous versions did not support DTLS in this manner, and the code was merely an experimental prototype with a hardcoded cookie. POC Code or Exploit Code No specific POC code or exploit code was provided on the page. Additional Information CVSS Score: 6.3 / 10 Severity Level: Medium Attack Vector: Network Attack Complexity: Low Attack Requirements: Present Privileges Required: None User Interaction: None Confidentiality Impact: None Integrity Impact: None Availability Impact: Low Credits Discoverer: Lukas Backstrom Reporter: garazdawi Fix Developer: IngelaAndin Fix Reviewer: dgud Related Links GitHub Repository: Erlang/OTP CVE ID: CVE-2024-54887 CWE ID: CWE-394 Summary This vulnerability involves a DTLS Cookie Bypass issue within the Erlang/OTP project, affecting multiple versions. Users are advised to upgrade to the fixed versions to address this security concern.

Goal Reached Thanks to every supporter — we hit 100%!

Erlang/OTP DTLS Cookie Bypass Vulnerability (CVE-2024-54887)

More from this source