CVE-2023-23759

CVSS V2 None CVSS V3 None
Description
There is a vulnerability in the fizz library prior to v2023.01.30.00 where a CHECK failure can be triggered remotely. This behavior requires the client supported cipher advertisement changing between the original ClientHello and the second ClientHello, crashing the process (impact is limited to denial of service).
Overview
  • CVE ID
  • CVE-2023-23759
  • Assigner
  • cve-assign@fb.com
  • Vulnerability Status
  • Received
  • Published Version
  • 2023-05-18T22:15:09
  • Last Modified Date
  • 2023-05-18T22:15:09
Weakness Enumerations
CWE URL
CWE-617 http://cwe.mitre.org/data/definitions/617.html
References
Reference URL Reference Tags
https://github.com/facebookincubator/fizz/commit/8d3649841597bedfb6986c30431ebad0eb215265
https://www.facebook.com/security/advisories/cve-2023-23759
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2023-23759
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-23759
History
Created Old Value New Value Data Type Notes
2023-05-18 23:00:51 Added to TrackCVE
2023-05-18 23:00:56 Weakness Enumeration new