CVE-2018-6346

A potential denial-of-service issue in the Proxygen handling of invalid HTTP2 priority settings (specifically a circular dependency). This affects Proxygen prior to v2018.12.31.00.

Score

CVSS 3.1 7.5 High

Status

Modified - cve-assign@fb.com

Published

2018-12-31

Last modified

2025-05-06

Weaknesses

CWE-388, CWE-400

Affected products

• Proxygen (Facebook)
• Proxygen (Proxygen Project)

References

• https://github.com/facebook/proxygen/commit/52cf331743ebd74194d6343a6c2ec52bb917c982