ISOMAN

CVE

CVE-2019-17023

After a HelloRetryRequest has been sent, the client may negotiate a lower protocol that TLS 1.3, resulting in an invalid state transition in the TLS State Machine. If the client gets into this state, incoming Application Data records will be ignored. This vulnerability affects Firefox < 72.

Severity
MEDIUM
CVSS
6.5
Published
Modified
NVD detailAll CVEs

Linked Releases

DistributionReleaseStatusEvidence
Ubuntu20.04.6 amd64 desktopunknownsource
Ubuntu20.04.6 amd64 live-serverunknownsource
Ubuntu18.04.6 amd64 desktopunknownsource
Ubuntu18.04.6 amd64 live-serverunknownsource
Ubuntu16.04.7 amd64 desktopunknownsource
Ubuntu16.04.6 i386 desktopunknownsource
Ubuntu16.04.7 amd64 serverunknownsource
Ubuntu16.04.6 i386 serverunknownsource

References

  1. https://bugzilla.mozilla.org/show_bug.cgi?id=1590001
  2. https://usn.ubuntu.com/4234-1/
  3. https://usn.ubuntu.com/4397-1/
  4. https://www.debian.org/security/2020/dsa-4726
  5. https://www.mozilla.org/security/advisories/mfsa2020-01/
  6. https://bugzilla.mozilla.org/show_bug.cgi?id=1590001
  7. https://usn.ubuntu.com/4234-1/
  8. https://usn.ubuntu.com/4397-1/
  9. https://www.debian.org/security/2020/dsa-4726
  10. https://www.mozilla.org/security/advisories/mfsa2020-01/