High severity7.5NVD Advisory· Published Aug 20, 2019· Updated Jun 17, 2026

CVE-2019-11924

Description

A peer could send empty handshake fragments containing only padding which would be kept in memory until a full handshake was received, resulting in memory exhaustion. This issue affects versions v2019.01.28.00 and above of fizz, until v2019.08.05.00.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Facebook/fizz3 versions
cpe:2.3:a:facebook:fizz:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:facebook:fizz:*:*:*:*:*:*:*:*range: >=2019.01.28.00,<=2019.08.05.00
- (no CPE)range: v2019.01.28.00 - v2019.08.05.00
- (no CPE)range: v2019.08.12.00

Patches

Vulnerability mechanics

References

github.com/facebookincubator/fizz/commit/3eaddb33619eaaf74a760872850c550ad8f5c52fnvdPatchThird Party Advisory
github.com/facebookincubator/fizz/commit/6bf67137ef1ee5cd70c842b014c322b7deaf994bnvdPatchThird Party Advisory
www.facebook.com/security/advisories/cve-2019-11924nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000