Skip to content
Sign in
Not rated

CVE-2019-11934 Improper handling of close_notify alerts can result in an out-of-bounds read in AsyncSSLSocket

Description

Improper handling of close_notify alerts can result in an out-of-bounds read in AsyncSSLSocket. This issue affects folly prior to v2019.11.04.00.

Affected products and versions

Product Affected versions Fixed in
folly 2019.11 earliest → 2019.11.04.00 2019.11.04.00

Other CVEs of folly

The 3 CVEs of folly →
CVE-2021-24036 Passing an attacker controlled size when creating an IOBuf could cause integer overflow, leading to an out of bounds… Not rated CVE-2018-6337 folly::secureRandom will re-use a buffer between parent and child processes when fork() is called 7.5 High
Track this CVE