TI-2018-04671 CVE-2018-6347 · GHSA-95px-qh9x-29gf
Uncontrolled resource consumption in Meta Proxygen
Priority MEDIUM 42
An issue in the Proxygen handling of HTTP2 parsing of headers/trailers can lead to a denial-of-service attack.
Vulnerabilities
5 records
TI-2018-04670 CVE-2018-6346 · GHSA-gvqg-4vgr-vq39
Uncontrolled resource consumption in Meta Proxygen
Priority MEDIUM 42
A potential denial-of-service issue in the Proxygen handling of invalid HTTP2 priority settings (specifically a circular dependency).
TI-2015-06037 CVE-2015-7265 · GHSA-cvvj-hjmf-8qfh
Improper access control in Facebook Proxygen before 2015-11-09
Priority LOW 35
Facebook Proxygen before 2015-11-09 mismanages HTTPMessage.request state, which allows remote attackers to conduct hijacking attacks and bypass ACL checks.
TI-2015-06036 CVE-2015-7264 · GHSA-p38g-8mq4-frxq
Injection in Facebook Proxygen before 2015-11-09
Priority MEDIUM 44
The SPDY/2 codec in Facebook Proxygen before 2015-11-09 truncates a certain field to two bytes, which allows hijacking and injection attacks.
TI-2015-06035 CVE-2015-7263 · GHSA-jpxm-vh75-qqhj
Improper access control in Facebook Proxygen before 2015-11-09
Priority LOW 35
The SPDY/2 codec in Facebook Proxygen before 2015-11-09 allows remote attackers to conduct hijacking attacks and bypass ACL checks via a crafted host value.