CVE-2023-23759

There is a vulnerability in the fizz library prior to v2023.01.30.00 where a CHECK failure can be triggered remotely

High · published May 18, 2023

CVSS v3.1
7.5
EPSS
1%
Percentile
53.5
In the wild
Unconfirmed
What it is

There is a vulnerability in the fizz library prior to v2023.01.30.00 where a CHECK failure can be triggered remotely. This behavior requires the client supported cipher advertisement changing between the original ClientHello and the second ClientHello, crashing the process (impact is limited to denial of service).

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00723 · 53.5th percentile
Published
2023-05-18T21:21Z
EPSS history
Timeline
  • 18 MAY 21:21Z
    There is a vulnerability in the fizz library prior to v2023.01.30.00 where a CHECK failure can be triggered remotely
    cvelistv5