CVE-2019-3554: Medium severity Facebook Wangle vulnerability
Wangle's AcceptRoutingHandler incorrectly casts a socket when accepting a TLS 1.3 connection, leading to a potential denial of service attack against systems accepting such connections. This affects versions of Wangle prior to v2019.01.14.00
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Wangleto a version that resolves this vulnerability.Fixed in v2019.01.14.00
Event History
Frequently Asked Questions
What is the severity of CVE-2019-3554?
CVE-2019-3554 is classified as a denial of service vulnerability.
How do I fix CVE-2019-3554?
To fix CVE-2019-3554, upgrade Wangle to version 2019.01.14.00 or later.
What software is affected by CVE-2019-3554?
CVE-2019-3554 affects all versions of Facebook Wangle prior to 2019.01.14.00.
What is the impact of exploiting CVE-2019-3554?
Exploiting CVE-2019-3554 can lead to a denial of service against systems accepting TLS 1.3 connections.
Is CVE-2019-3554 related to TLS 1.3 connections?
Yes, CVE-2019-3554 specifically affects the handling of TLS 1.3 connections.