CVE-2018-6347

An issue in the Proxygen handling of HTTP2 parsing of headers/trailers can lead to a denial-of-service attack. This affects Proxygen prior to v2018.12.31.00.

Score

CVSS 3.1 7.5 High

Status

Modified - cve-assign@fb.com

Published

2018-12-31

Last modified

2025-05-06

Weaknesses

CWE-20, CWE-400

Affected products

• Proxygen (Facebook)
• Proxygen (Proxygen Project)

References

• https://github.com/facebook/proxygen/commit/223e0aa6bc7590e86af1e917185a2e0efe160711