CVE-2019-11924

Published August 20th, 2019

View on NVD ↗

CVSS v3

N/A

CVSS v2

7.8

HIGH

Affected

PROJECT

Description

A peer could send empty handshake fragments containing only padding which would be kept in memory until a full handshake was received, resulting in memory exhaustion. This issue affects versions v2019.01.28.00 and above of fizz, until v2019.08.05.00.

facebookincubator/fizz

C++14 implementation of the TLS-1.3 standard

GitHub

1.2K