101 matches found
CVE-2019-11921
An out of bounds write is possible via a specially crafted packet in certain configurations of Proxygen due to improper handling of Base64 when parsing malformed binary content in Structured HTTP Headers. This issue affects versions of proxygen prior to v2019.07.22.00...
CVE-2025-55181
A flaw was found in proxygen. This vulnerability allows a denial of service DoS via sending an HTTP Hypertext Transfer Protocol request/response body with greater than 2^31 bytes, triggering an infinite loop and unbounded memory growth...
CVE-2025-55181
Sending an HTTP request/response body with greater than 2^31 bytes triggers an infinite loop in proxygen::coro::HTTPQuicCoroSession which blocks the backing event loop and unconditionally appends data to a std::vector per-loop iteration. This issue leads to unbounded memory growth and eventually...
Facebook Proxygen 安全漏洞
Facebook Proxygen is a set of open source C++ HTTP class libraries from Facebook Inc. in the United States. A security vulnerability exists in Facebook Proxygen that stems from an infinite loop triggered when processing large requests, which could lead to memory exhaustion...
EUVD-2018-18105
Malware in sbrugna...
EUVD-2018-18093
Malware in sbrugna...
EUVD-2021-10949
Malware in sbrugna...
EUVD-2015-7194
Malware in sbrugna...
EUVD-2019-3579
Malware in sbrugna...
EUVD-2018-18095
Malware in sbrugna...
EUVD-2018-18101
Malware in sbrugna...
EUVD-2015-7195
Malware in sbrugna...
EUVD-2018-18104
Malware in sbrugna...
EUVD-2019-3596
Malware in sbrugna...
EUVD-2015-7196
Malware in sbrugna...
Linux Distros Unpatched Vulnerability : CVE-2018-6335
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A Malformed h2 frame can cause 'std::outofrange' exception when parsing priority meta data. This behavior can lead to denial-of-service. This affects all...
Linux Distros Unpatched Vulnerability : CVE-2018-6332
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A potential denial-of-service issue in the Proxygen handling of invalid HTTP2 settings which can cause the server to spend disproportionate resources. This...
CVE-2021-24029
A packet of death scenario is possible in mvfst via a specially crafted message during a QUIC session, which causes a crash via a failed assertion. Per QUIC specification, this particular message should be treated as a connection error. This issue affects mvfst versions prior to commit...
CVE-2020-1897
A use-after-free is possible due to an error in lifetime management in the request adaptor when a malicious client invokes request error handling in a specific sequence. This issue affects versions of proxygen prior to v2020.05.18.00...
CVE-2019-11940
In the course of decompressing HPACK inside the HTTP2 protocol, an unexpected sequence of header table resize operations can place the header table into a corrupted state, leading to a use-after-free condition and undefined behavior. This issue affects Proxygen from v0.29.0 until v2017.04.03.00...