CVE-2019-3560

2019-04-2900:00:00

CWE-835

facebook

www.cve.org

EPSS

0.004

Percentile

72.4%

JSON

An improperly performed length calculation on a buffer in PlaintextRecordLayer could lead to an infinite loop and denial-of-service based on user input. This issue affected versions of fizz prior to v2019.03.04.00.

CNA Affected

[
  {
    "vendor": "Facebook",
    "product": "fizz",
    "versions": [
      {
        "version": "v2019.03.04.00",
        "status": "affected"
      },
      {
        "version": "unspecified",
        "lessThan": "v2019.03.04.00",
        "status": "affected",
        "versionType": "custom"
      }
    ]
  }
]