Lucene search
+L

145 matches found

OSV
OSV
•added 2018/12/03 2:29 p.m.•12 views

UBUNTU-CVE-2018-6332

A potential denial-of-service issue in the Proxygen handling of invalid HTTP2 settings which can cause the server to spend disproportionate resources. This affects all supported versions of HHVM 3.24.3 and 3.21.7 and below when using the proxygen server to handle HTTP2 requests...

5.9CVSS6.2AI score0.01086EPSS
SaveExploits0References3
OSV
OSV
•added 2018/12/03 2:29 p.m.•29 views

CVE-2018-6332

A potential denial-of-service issue in the Proxygen handling of invalid HTTP2 settings which can cause the server to spend disproportionate resources. This affects all supported versions of HHVM 3.24.3 and 3.21.7 and below when using the proxygen server to handle HTTP2 requests...

5.9CVSS6.8AI score
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2018/12/03 2:29 p.m.•47 views

CVE-2018-6332

A potential denial-of-service issue in the Proxygen handling of invalid HTTP2 settings which can cause the server to spend disproportionate resources. This affects all supported versions of HHVM 3.24.3 and 3.21.7 and below when using the proxygen server to handle HTTP2 requests...

5.9CVSS6.2AI score0.01086EPSS
SaveExploits0References2
Prion
Prion
•added 2018/12/03 2:29 p.m.•30 views

Denial of service

A potential denial-of-service issue in the Proxygen handling of invalid HTTP2 settings which can cause the server to spend disproportionate resources. This affects all supported versions of HHVM 3.24.3 and 3.21.7 and below when using the proxygen server to handle HTTP2 requests...

4.3CVSS5.6AI score0.01086EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2018/12/03 2:00 p.m.•10 views

CVE-2018-6332

A potential denial-of-service issue in the Proxygen handling of invalid HTTP2 settings which can cause the server to spend disproportionate resources. This affects all supported versions of HHVM 3.24.3 and 3.21.7 and below when using the proxygen server to handle HTTP2 requests...

5.7AI score0.01086EPSS
SaveExploits0References1
CVE
CVE
•added 2018/12/03 2:00 p.m.•99 views

CVE-2018-6332

CVE-2018-6332: A denial-of-service issue in the Proxygen handling of invalid HTTP/2 settings can cause the HHVM Proxygen server to consume disproportionate resources. Affected: HHVM versions 3.24.3 and 3.21.7 and earlier when using the proxygen HTTP/2 handler. Root cause and impact are described ...

5.9CVSS5.6AI score0.01086EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2018/12/03 2:00 p.m.•40 views

CVE-2018-6332

A potential denial-of-service issue in the Proxygen handling of invalid HTTP2 settings which can cause the server to spend disproportionate resources. This affects all supported versions of HHVM 3.24.3 and 3.21.7 and below when using the proxygen server to handle HTTP2 requests...

5.7AI score0.01086EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/12/03 12:00 a.m.•5 views

CVE-2018-6332: Uncontrolled Resource Consumption

A potential denial-of-service issue in the Proxygen handling of invalid HTTP2 settings which can cause the server to spend disproportionate resources. This affects all supported versions of HHVM 3.24.3 and 3.21.7 and below when using the proxygen server to handle HTTP2 requests...

5.9CVSS6.1AI score0.01086EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2018/12/03 12:00 a.m.•21 views

PT-2018-17482 · Facebook · Hhvm

Name of the Vulnerable Software and Affected Versions: HHVM versions 3.24.3 and 3.21.7 and below Description: A potential denial-of-service issue exists in the Proxygen handling of invalid HTTP2 settings, causing the server to spend disproportionate resources when handling HTTP2 requests using th...

5.9CVSS5.6AI score0.01086EPSS
SaveExploits0References8
CNVD
CNVD
•added 2017/04/20 12:00 a.m.•11 views

Facebook Proxygen Security Vulnerability (CNVD-2017-05674)

Facebook Proxygen is a set of open source C++ HTTP class libraries from the U.S. company Facebook . A security vulnerability exists in the SPDY/2 codec in versions of Facebook Proxygen prior to 2015-11-09. An attacker can exploit the vulnerability to perform hijacking and injection attacks...

9.8CVSS7.1AI score0.01212EPSS
SaveExploits0References1
CNVD
CNVD
•added 2017/04/20 12:00 a.m.•13 views

Facebook Proxygen Security Breach

Facebook Proxygen is a set of open source C++ HTTP class libraries from the U.S. company Facebook . A security vulnerability exists in versions of Facebook Proxygen prior to 2015-11-09 that stems from the program not properly managing the HTTPMessage.request state. A remote attacker can exploit t...

7.5CVSS6.8AI score0.01243EPSS
SaveExploits0References1
CNVD
CNVD
•added 2017/04/20 12:00 a.m.•15 views

Facebook Proxygen Security Bypass Vulnerability

Facebook Proxygen is a set of open source C++ HTTP class libraries from the U.S. company Facebook . A security vulnerability exists in the SPDY/2 codec in versions of Facebook Proxygen prior to 2015-11-09. A remote attacker can exploit the vulnerability with the help of a specially crafted host...

7.5CVSS6.8AI score0.01243EPSS
SaveExploits0References1
Prion
Prion
•added 2017/04/10 3:59 a.m.•20 views

Design/Logic Flaw

The SPDY/2 codec in Facebook Proxygen before 2015-11-09 truncates a certain field to two bytes, which allows hijacking and injection attacks...

7.5CVSS7.3AI score0.01212EPSS
SaveExploits0References1Affected Software1
NVD
NVD
•added 2017/04/10 3:59 a.m.•24 views

CVE-2015-7265

Facebook Proxygen before 2015-11-09 mismanages HTTPMessage.request state, which allows remote attackers to conduct hijacking attacks and bypass ACL checks...

7.5CVSS7.6AI score0.01243EPSS
SaveExploits0References1
Prion
Prion
•added 2017/04/10 3:59 a.m.•25 views

Design/Logic Flaw

The SPDY/2 codec in Facebook Proxygen before 2015-11-09 allows remote attackers to conduct hijacking attacks and bypass ACL checks via a crafted host value...

5CVSS7.1AI score0.01243EPSS
SaveExploits0References1Affected Software1
NVD
NVD
•added 2017/04/10 3:59 a.m.•26 views

CVE-2015-7264

The SPDY/2 codec in Facebook Proxygen before 2015-11-09 truncates a certain field to two bytes, which allows hijacking and injection attacks...

9.8CVSS9.5AI score0.01212EPSS
SaveExploits0References1
CVE
CVE
•added 2017/04/10 3:00 a.m.•65 views

CVE-2015-7264

Facebook Proxygen’s SPDY/2 codec contains a vulnerability (CVE-2015-7264) in versions prior to 2015-11-09 where a field is truncated to two bytes, enabling hijacking and injection attacks over the network. The issue affects the SPDY/2 handling within Proxygen; exploitation is described as enablin...

9.8CVSS9.4AI score0.01212EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2017/04/10 3:00 a.m.•44 views

CVE-2015-7263

The SPDY/2 codec in Facebook Proxygen before 2015-11-09 allows remote attackers to conduct hijacking attacks and bypass ACL checks via a crafted host value...

7.4AI score0.01243EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2017/04/10 3:00 a.m.•40 views

CVE-2015-7265

Facebook Proxygen before 2015-11-09 mismanages HTTPMessage.request state, which allows remote attackers to conduct hijacking attacks and bypass ACL checks...

7.6AI score0.01243EPSS
SaveExploits0References1
CVE
CVE
•added 2017/04/10 3:00 a.m.•75 views

CVE-2015-7263

Facebook Proxygen’s SPDY/2 codec (pre-2015-11-09) is vended with a vulnerability that allows remote attackers to hijack sessions and bypass ACL checks by sending a crafted host value. Affected component: SPDY/2 codec in Proxygen. Underlying impact described in sources as partial integrity impact ...

7.5CVSS7.4AI score0.01243EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder