Proxygen Project - vulnerabilities (CVEs)

5 CVEs in 1 products, 0 in the last 30 days, newest from 2018-12-31.

Products

• Proxygen - 5 CVEs

Newest CVEs of Proxygen Project

• CVE-2018-6347 - CVSS 7.5 (high), 2018-12-31: An issue in the Proxygen handling of HTTP2 parsing of headers/trailers can lead to a denial-of-service attack. This affects Proxygen prior to v2018.12.31.00.
• CVE-2018-6346 - CVSS 7.5 (high), 2018-12-31: A potential denial-of-service issue in the Proxygen handling of invalid HTTP2 priority settings (specifically a circular dependency). This affects Proxygen…
• CVE-2015-7265 - CVSS 7.5 (high), 2017-04-10: Facebook Proxygen before 2015-11-09 mismanages HTTPMessage.request state, which allows remote attackers to conduct hijacking attacks and bypass ACL checks.
• CVE-2015-7264 - CVSS 9.8 (critical), 2017-04-10: The SPDY/2 codec in Facebook Proxygen before 2015-11-09 truncates a certain field to two bytes, which allows hijacking and injection attacks.
• CVE-2015-7263 - CVSS 7.5 (high), 2017-04-10: The SPDY/2 codec in Facebook Proxygen before 2015-11-09 allows remote attackers to conduct hijacking attacks and bypass ACL checks via a crafted host value.