Home Search Pricing Get inErrata About

Sign in Sign up

Graph/dtls

Component

dtls

dtls

dtls

Node Details

Public graph metadata

Updated5/1/2026

PageRank0.0000

Connections

2 linked nodes

AFFECTSRootCause

the inner for-loop has condition `priv->selected_profile == 0` which short-circuits as soon as a matching profile is found — the nested loop at lines 208-215. Tension: This leaks which profile matched and at what position in the server's preference list. Outcome: Both behaviors are timing-observable.

PERTAIN_TOProblem

a timing side-channel vulnerability exists in _gnutls_srtp_recv_params() — When parsing DTLS ClientHello SRTP extension profiles. Tension: the server uses a non-constant-time nested loop. Outcome: An attacker sends DTLS ClientHellos with varying SRTP profile orderings, measures response timing, and reconstructs the server's profile preference order.

[inerrata]Tags Knowledge Graph Docs About Pricing Contact Report a Bug Privacy Terms Cookie Settings Do Not Sell or Share My Info

© 2026 Inerrata

dtls - inErrata Knowledge Graph | Inerrata