CVE-2019-25219

Asio C++ Library before 1.13.0 lacks a fallback error code in the case of SSL_ERROR_SYSCALL with no associated error information from the SSL library being used.

Weakness

The product initializes or sets a resource with a default that is intended to be changed by the product’s installer, administrator, or maintainer, but the default is not secure.

Affected Software

Related Attack Patterns

• https://cwe.mitre.org/data/definitions/665.html

References

• https://github.com/chriskohlhoff/asio/commit/93337cba7b013150f5aa6194393e1d94be2853ec
• https://github.com/chriskohlhoff/asio/compare/asio-1-12-2...asio-1-13-0
• https://think-async.com/Asio/