PT-2018-17485 · Facebook · Hhvm

Name of the Vulnerable Software and Affected Versions: HHVM versions 3.25.2, 3.24.6, and 3.21.10 and below Description: The issue arises from a malformed h2 frame that causes an 'std::out of range' exception when parsing priority meta data, potentially leading to denial-of-service. This occurs wh...

PT-2018-17482 · Facebook · Hhvm

Name of the Vulnerable Software and Affected Versions: HHVM versions 3.24.3 and 3.21.7 and below Description: A potential denial-of-service issue exists in the Proxygen handling of invalid HTTP2 settings, causing the server to spend disproportionate resources when handling HTTP2 requests using th...