CVE-2020-1897

2020-05-1822:15:13

Google

osv.dev

6.8 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

60.7%

JSON

A use-after-free is possible due to an error in lifetime management in the request adaptor when a malicious client invokes request error handling in a specific sequence. This issue affects versions of proxygen prior to v2020.05.18.00.

CPENameOperatorVersion
proxygeneq2019.05.13.00
proxygeneq2018.08.13.00
proxygeneq2017.05.29.00
proxygeneq2017.08.14.00
proxygeneq2018.08.27.00
proxygeneq2020.05.11.00
proxygeneq2017.08.28.00
proxygeneq2018.04.23.00
proxygeneq2017.05.01.00
proxygeneq2018.07.23.00

Name	Operator	Version
proxygen	eq	2019.05.13.00
proxygen	eq	2018.08.13.00
proxygen	eq	2017.05.29.00
proxygen	eq	2017.08.14.00
proxygen	eq	2018.08.27.00
proxygen	eq	2020.05.11.00
proxygen	eq	2017.08.28.00
proxygen	eq	2018.04.23.00
proxygen	eq	2017.05.01.00
proxygen	eq	2018.07.23.00