CVE-2019-11924

A peer could send empty handshake fragments containing only padding which would be kept in memory until a full handshake was received, resulting in memory…

published August 20, 2019

CVSS
—
EPSS
2%
Percentile
83.9
In the wild
Unconfirmed
What it is

A peer could send empty handshake fragments containing only padding which would be kept in memory until a full handshake was received, resulting in memory exhaustion. This issue affects versions v2019.01.28.00 and above of fizz, until v2019.08.05.00.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02399 · 83.9th percentile
Published
2019-08-20T19:32Z
EPSS history
Timeline
  • 20 AUG 19:32Z
    A peer could send empty handshake fragments containing only padding which would be kept in memory until a full handshake was received, resulting in memory…
    cvelistv5