Denial of Service Vulnerability in Wangle by Facebook
CVE-2019-3554

5.9MEDIUM

Key Information:

Vendor

Facebook

Status
Wangle
Vendor
CVE Published:
15 January 2019

What is CVE-2019-3554?

The vulnerability in Wangle occurs due to improper socket casting in the AcceptRoutingHandler when handling TLS 1.3 connections. This misconfiguration can lead to potential denial of service attacks, affecting systems that accept these secure connections. Specifically, versions of Wangle released prior to v2019.01.14.00 are susceptible, which could allow attackers to exploit this flaw and disrupt service availability.

Affected Version(s)

Wangle v2019.01.14.00

Wangle < unspecified

References

https://github.com/facebook/wangle/commit/3b17ba10a82c71e...
x_refsource_MISC

CVSS V3.1

Score:
5.9
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.