Description
There is a vulnerability in the fizz library prior to v2023.01.30.00 where a CHECK failure can be triggered remotely. This behavior requires the client supported cipher advertisement changing between the original ClientHello and the second ClientHello, crashing the process (impact is limited to denial of service).
Published: 2023-05-18
Score: 7.5 High
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

No analysis available yet.

Remediation

No remediation available yet.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
EUVD EUVD EUVD-2023-27845 There is a vulnerability in the fizz library prior to v2023.01.30.00 where a CHECK failure can be triggered remotely. This behavior requires the client supported cipher advertisement changing between the original ClientHello and the second ClientHello, crashing the process (impact is limited to denial of service).
History

Tue, 21 Jan 2025 21:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Subscriptions

Facebook Fizz
cve-icon MITRE

Status: PUBLISHED

Assigner: facebook

Published:

Updated: 2025-01-21T20:49:35.562Z

Reserved: 2023-01-17T19:56:08.425Z

Link: CVE-2023-23759

cve-icon Vulnrichment

Updated: 2024-08-02T10:42:25.872Z

cve-icon NVD

Status : Modified

Published: 2023-05-18T22:15:09.597

Modified: 2025-01-21T21:15:08.963

Link: CVE-2023-23759

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses