PT-2019-12570

CVE-2019-11934

Published

2019-12-04

Updated

2019-12-13

CVSS 3.1

9.8

Critical

MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions folly versions prior to 2019.11.04.00

Description The issue is related to the improper handling of close notify alerts, which can lead to an out-of-bounds read in AsyncSSLSocket.

Recommendations For versions prior to 2019.11.04.00, update to version 2019.11.04.00 or later to resolve the issue.

Exploitability

Fix

Impacts

Vendors

Affected products

Weakness enumeration

Related identifiers

Found an issue in the description? Have something to add? Feel free to write us 👾