---

CVE-2019-17023 - log back

CVE-2019-17023 edited at 08 Jan 2020 08:58:18
Severity	- Unknown + Low
Remote	- Unknown + Remote
Type	- Unknown + Denial of service
Description	+ A security issue has been found in the NSS component of Firefox before 72.0. After a HelloRetryRequest has been sent, the client may negotiate a lower protocol that TLS 1.3, resulting in an invalid state transition in the TLS State Machine. If the client gets into this state, incoming Application Data records will be ignored.
References	+ https://www.mozilla.org/en-US/security/advisories/mfsa2020-01/#CVE-2019-17023 + https://bugzilla.mozilla.org/show_bug.cgi?id=1590001
Notes

CVE-2019-17023 created at 08 Jan 2020 08:52:31