An improperly performed length calculation on a buffer in PlaintextRecordLayer could lead to an infinite loop and denial-of-service based on user input. This issue affected versions of fizz prior to v2019.03.04.00.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade kernel-defaultUpgrade cluster-md-kmp-defaultUpgrade dlm-kmp-defaultUpgrade kernel-azure-baseUpgrade kernel-default-manUpgrade kernel-docsUpgrade kernel-default-extraUpgrade gfs2-kmp-defaultUpgrade kernel-devel-azureUpgrade kernel-source-azureUpgrade kernel-obs-buildUpgrade ocfs2-kmp-default | Dec 19, 2019 | Apr 29, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub