CVE-2019-3560

State
Published
Severity
Not scored
Published
Apr 29, 2019
Updated
Feb 13, 2025
Reserved
Jan 2, 2019

Read the record on cve.org

Description

An improperly performed length calculation on a buffer in PlaintextRecordLayer could lead to an infinite loop and denial-of-service based on user input. This issue affected versions of fizz prior to v2019.03.04.00.

Scores

The record has no CVSS score.

Weaknesses

  • CWE-835 Loop with Unreachable Exit Condition (CWE-835)

Affected Products

ProductVersions
fizzFacebook
  • v2019.03.04.00Affected
  • before v2019.03.04.00Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.