GnuTLS DTLS Packet Reordering Vulnerability Leading to Denial-of-Service

A denial-of-service vulnerability has been identified in GnuTLS, specifically within the Datagram Transport Layer Security (DTLS) packet reordering logic. The issue arises because the comparator function, which orders DTLS packets by their sequence numbers, improperly manages packets with duplicate sequence numbers. This mismanagement can cause unstable packet ordering or undefined behavior, ultimately leading to a denial-of-service condition.

Impact

Exploitation of this vulnerability can cause a denial-of-service condition by disrupting normal packet ordering, potentially leading to undefined behavior in applications using DTLS.