CVE-2019-11924

2019-08-2020:15:11

Google

osv.dev

6.8 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

61.2%

JSON

A peer could send empty handshake fragments containing only padding which would be kept in memory until a full handshake was received, resulting in memory exhaustion. This issue affects versions v2019.01.28.00 and above of fizz, until v2019.08.05.00.

CPENameOperatorVersion
fizzeq2019.02.18.00
fizzeq2019.03.25.00
fizzeq2018.12.03.00
fizzeq2019.02.25.00
fizzeq2019.04.29.00
fizzeq2019.05.27.00
fizzeq2019.06.17.00
fizzeq2018.12.31.00
fizzeq2019.02.11.00
fizzeq2019.06.24.00

Name	Operator	Version
fizz	eq	2019.02.18.00
fizz	eq	2019.03.25.00
fizz	eq	2018.12.03.00
fizz	eq	2019.02.25.00
fizz	eq	2019.04.29.00
fizz	eq	2019.05.27.00
fizz	eq	2019.06.17.00
fizz	eq	2018.12.31.00
fizz	eq	2019.02.11.00
fizz	eq	2019.06.24.00