Vendors / Proxygen Project Records 5 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 4
Exploited now Proxygen Project records in CISA KEV No Proxygen Project vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 44
The SPDY/2 codec in Facebook Proxygen before 2015-11-09 truncates a certain field to two bytes, which allows hijacking and injection attacks.
CVSS 3.0 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01212 · Published 2017-04-10 · No fix listed CWE-74
Priority MEDIUM 42
An issue in the Proxygen handling of HTTP2 parsing of headers/trailers can lead to a denial-of-service attack.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.0137 · Published 2018-12-31 · No fix listed CWE-400
Priority MEDIUM 42
A potential denial-of-service issue in the Proxygen handling of invalid HTTP2 priority settings (specifically a circular dependency).
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.0137 · Published 2018-12-31 · Fixed in v2018.12.31.00 CWE-400
Priority LOW 35
Facebook Proxygen before 2015-11-09 mismanages HTTPMessage.request state, which allows remote attackers to conduct hijacking attacks and bypass ACL checks.
CVSS 3.0 HIGH 7.5· Network · No auth · No interaction · EPSS 0.01243 · Published 2017-04-10 · No fix listed CWE-284
Priority LOW 35
The SPDY/2 codec in Facebook Proxygen before 2015-11-09 allows remote attackers to conduct hijacking attacks and bypass ACL checks via a crafted host value.
CVSS 3.0 HIGH 7.5· Network · No auth · No interaction · EPSS 0.01243 · Published 2017-04-10 · No fix listed CWE-284
Open these records in search → All records by CVSS severity
1 4 0 0 0
THREATIST.IORead the docs