Semmle Discovers Denial of Service (DoS) Vulnerability in Facebook Fizz

guest · Mar 20, 2019

Semmle Discovers Denial of Service (DoS) Vulnerability in Facebook Fizz
March 19, 2019
https://semmle.com/news/denial-service-dos-vulnerability-facebook-fizz

Semmle announced today that it has found a critical denial of service (DoS) vulnerability in the Fizz project, Facebook’s open source implementation of the transport layer security (TLS) protocol. Fizz is used to facilitate secure communications with web services, and is used on most of Facebook’s internal and external infrastructure.

A patch was published on February 25, and the vulnerability has been assigned CVE-2019-3560.
All other web applications that rely on Fizz are advised to upgrade their Fizz libraries as a matter of urgency. A patch for this vulnerability has been included in Fizz version 2019.02.25.00 (and later).

Facebook acknowledged our report of the vulnerability and moved quickly to patch affected servers.
Click to expand...

Log in or Sign up

Semmle Discovers Denial of Service (DoS) Vulnerability in Facebook Fizz

guest Guest

Log in or Sign up

Semmle Discovers Denial of Service (DoS) Vulnerability in Facebook Fizz

guest Guest

Useful Searches