Aller au contenu
Se connecter
Non notée

CVE-2019-11924 A peer could send empty handshake fragments containing only padding which would be kept in memory until a full handshake…

Description

A peer could send empty handshake fragments containing only padding which would be kept in memory until a full handshake was received, resulting in memory exhaustion. This issue affects versions v2019.01.28.00 and above of fizz, until v2019.08.05.00.

Produits et versions touchés

Produit Versions touchées Corrigé en
fizz 2019.08.12.00 Pas de correctif indiqué
fizz 2019.01 2019.01.28.00 → dernières Pas de correctif indiqué

Autres CVE de fizz

Les 3 CVE de fizz →
CVE-2023-23759 There is a vulnerability in the fizz library prior to v2023.01.30.00 where a CHECK failure can be triggered remotely 7.5 Élevée CVE-2019-3560 An improperly performed length calculation on a buffer in PlaintextRecordLayer could lead to an infinite loop and… Non notée
Suivre cette CVE