CVE-2019-3554 Wangle's AcceptRoutingHandler incorrectly casts a socket when accepting a TLS 1.3 connection, leading to a potential denial of service attack against systems accepting such connections. This affects v...
MediumCVSS 5.9
EPSS 1.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Wangle's AcceptRoutingHandler incorrectly casts a socket when accepting a TLS 1.3 connection, leading to a potential denial of service attack against systems accepting such connections. This affects versions of Wangle prior to v2019.01.14.00
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| facebook wangle | < 2019.01.14.00 | 2019.01.14.00 |
| facebook wangle | = v2019.01.14.00 | No fix listed |
| facebook wangle | < v2019.01.14.00 | v2019.01.14.00 |
References
- github.com patch third-party-advisory