PT-2019-16605
CVE-2019-3554
·
Published
2019-01-15
·
Updated
2019-10-09
Description by
CVSS 3.1
5.9
MediumMetricsAV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
Wangle versions prior to v2019.01.14.00
Description
The issue arises from Wangle's AcceptRoutingHandler incorrectly casting a socket when accepting a TLS 1.3 connection. This can lead to a potential denial of service attack against systems that accept such connections.
Recommendations
For versions prior to v2019.01.14.00, update to version v2019.01.14.00 or later to resolve the issue.
Found an issue in the description? Have something to add? Feel free to write us 👾