Search Results (2 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2019-3560 1 Facebook 1 Fizz 2025-02-13 7.5 High
An improperly performed length calculation on a buffer in PlaintextRecordLayer could lead to an infinite loop and denial-of-service based on user input. This issue affected versions of fizz prior to v2019.03.04.00.
CVE-2019-11924 1 Facebook 1 Fizz 2024-11-21 N/A
A peer could send empty handshake fragments containing only padding which would be kept in memory until a full handshake was received, resulting in memory exhaustion. This issue affects versions v2019.01.28.00 and above of fizz, until v2019.08.05.00.