CVE-2019-3560

An improperly performed length calculation on a buffer in PlaintextRecordLayer could lead to an infinite loop and denial-of-service based on user input. This issue affected versions of fizz prior to v2019.03.04.00.

Affected products

Fizz

Facebook Fizz

< 2019.03.04.00

Fix

Available

CVSS 3.1

7.5 HIGH

EPSS

2.4% (83th percentile)

Weakness

CWE-131, CWE-835

NVD status

Modified

Published

2019-04-29