CVE-2019-25219: 
CBL Mariner vulnerability analysis and mitigation

The vulnerability CVE-2019-25219 affects Asio C++ Library versions before 1.13.0. The issue involves a missing fallback error code in cases where SSL_ERROR_SYSCALL occurs without associated error information from the SSL library being used (NVD).

The vulnerability stems from the SSL error handling mechanism in Asio C++ Library where there was no proper fallback error code implemented when encountering SSL_ERROR_SYSCALL without any associated error information from the underlying SSL library. This was fixed in version 1.13.0 by adding appropriate error handling (Github Commit). The vulnerability has been assigned a CVSS v3.1 Base Score of 7.5 HIGH (NVD).

When SSL_ERROR_SYSCALL occurs without associated error information, the lack of proper error handling could lead to undefined behavior or incorrect error reporting in applications using the Asio C++ Library for SSL/TLS communications (NVD).

The vulnerability is remotely exploitable without requiring authentication, as indicated by the CVSS score and vector AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N (NVD).

The vulnerability was fixed in Asio C++ Library version 1.13.0. Users should upgrade to version 1.13.0 or later to receive the fix (Github Compare).