CVE-2019-3563

Summary of CVE-2019-3563 : Wangle’s LineBasedFrameDecoder contains a logic flaw in newline identification that can incorrectly advance the buffer, causing a potential underflow. This affects versions of Wangle prior to v2019.04.22.00. The issue is rooted in the way the decoder handles line breaks...

CVE-2019-3554

Wangle's AcceptRoutingHandler incorrectly casts a socket when accepting a TLS 1.3 connection, leading to potential denial-of-service against systems that accept TLS 1.3. Affected: Wangle versions prior to v2019.01.14.00. Root cause: incorrect socket casting in AcceptRoutingHandler during TLS 1.3 ...