CVEs-PoC/2019/CVE-2019-3560.md

CVE-2019-3560

Description

An improperly performed length calculation on a buffer in PlaintextRecordLayer could lead to an infinite loop and denial-of-service based on user input. This issue affected versions of fizz prior to v2019.03.04.00.

POC

Reference

• http://packetstormsecurity.com/files/172836/polkit-Authentication-Bypass.html

Github

• https://github.com/0dayhunter/Facebook-BugBounty-Writeups
• https://github.com/ARPSyndicate/cvemon
• https://github.com/Krishnathakur063/Facebook-BugBounty-Writeup
• https://github.com/SummerSec/learning-codeql
• https://github.com/bikramsah/Meta--BugBounty-Writeups
• https://github.com/github/securitylab
• https://github.com/jaiswalakshansh/Facebook-BugBounty-Writeups
• https://github.com/khulnasoft-lab/SecurityLab
• https://github.com/lennysec/awesome-tls-hacks
• https://github.com/lnick2023/nicenice
• https://github.com/paulveillard/cybersecurity-tls-security
• https://github.com/qazbnm456/awesome-cve-poc
• https://github.com/xbl3/awesome-cve-poc_qazbnm456