PT-2019-12570 · Facebook · Folly

Publicado 2019-12-04 · Atualizado 2019-12-13 · CVE-2019-11934

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions folly versions prior to 2019.11.04.00

Description The issue is related to the improper handling of close notify alerts, which can lead to an out-of-bounds read in AsyncSSLSocket.

Recommendations For versions prior to 2019.11.04.00, update to version 2019.11.04.00 or later to resolve the issue.

Correção

Out of bounds Read

Enumeração de Fraquezas

CWE-125

Identificadores relacionados

CVE-2019-11934

Produtos afetados

Folly

Referências · 4

• https://github.com/facebook/folly/commit/c321eb588909646c15aefde035fd3133ba32cdee · Correção
• https://osv.dev/vulnerability/CVE-2019-11934 · Aviso do Fabricante
• https://facebook.com/security/advisories/cve-2019-11934 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2019-11934 · Nota de Segurança