CVE-2019-17023

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 72

Description The issue is related to an error in the HelloRetryRequest extension, where a client can negotiate a protocol lower than TLS 1.3. This can lead to an invalid state transition in the TLS State Machine. If the client enters this state, incoming Application Data records will be ignored. A remote attacker can exploit this issue to impact data integrity.

Recommendations For Firefox versions prior to 72, update to version 72 or later to resolve the issue.