PT-2024-10750 · Unknown · Asio C++ Library

CVE-2019-25219

·

Published

2024-10-29

·

Updated

2024-11-01

CVSS v3.1

7.5

High

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions Asio C++ Library versions prior to 1.13.0
Description The issue is related to a lack of a fallback error code in the case of SSL ERROR SYSCALL with no associated error information from the SSL library being used. This is a high-severity vulnerability that requires immediate attention. Users are urged to update to the latest version to mitigate risks.
Recommendations For Asio C++ Library versions prior to 1.13.0, update to version 1.13.0 or later to resolve the issue. As a temporary workaround, consider disabling the use of SSL ERROR SYSCALL until a patch is available. Restrict access to the vulnerable library to minimize the risk of exploitation. Avoid using the library in situations where SSL ERROR SYSCALL may occur until the issue is resolved.

Fix

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

AZL-52023
AZL-52029
CVE-2019-25219

Affected Products

Asio C++ Library