An issue was discovered in the DTLS handshake implementation in wolfSSL before 4.5.0. Clear DTLS application_data messages in epoch 0 do not produce an out-of-order error. Instead, these messages are returned to the application.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-24585
Reference (s):
- https://github.com/wolfSSL/wolfssl/pull/3219
- https://github.com/wolfSSL/wolfssl/releases/tag/v4.5.0-stable