Skip to content
Sign in
Not rated

CVE-2019-11924 A peer could send empty handshake fragments containing only padding which would be kept in memory until a full handshake…

Description

A peer could send empty handshake fragments containing only padding which would be kept in memory until a full handshake was received, resulting in memory exhaustion. This issue affects versions v2019.01.28.00 and above of fizz, until v2019.08.05.00.

Affected products and versions

Product Affected versions Fixed in
fizz 2019.08.12.00 No fix stated
fizz 2019.01 2019.01.28.00 → latest No fix stated

Other CVEs of fizz

The 3 CVEs of fizz →
CVE-2023-23759 There is a vulnerability in the fizz library prior to v2023.01.30.00 where a CHECK failure can be triggered remotely 7.5 High CVE-2019-3560 An improperly performed length calculation on a buffer in PlaintextRecordLayer could lead to an infinite loop and… Not rated
Track this CVE