Vulmon
Recent Vulnerabilities
Product List
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
facebook proxygen vulnerabilities and exploits
(subscribe to this query)
7.5
CVSSv3
CVE-2021-24029
A packet of death scenario is possible in mvfst via a specially crafted message during a QUIC session, which causes a crash via a failed assertion. Per QUIC specification, this particular message should be treated as a connection error. This issue affects mvfst versions prior to ...
Facebook Proxygen
Facebook Mvfst
7.5
CVSSv3
CVE-2018-6343
Proxygen fails to validate that a secondary auth manager is set before dereferencing it. That can cause a denial of service issue when parsing a Certificate/CertificateRequest HTTP2 Frame over a fizz (TLS 1.3) transport. This issue affects Proxygen releases starting from v2018.10...
Facebook Proxygen
9.8
CVSSv3
CVE-2020-1897
A use-after-free is possible due to an error in lifetime management in the request adaptor when a malicious client invokes request error handling in a specific sequence. This issue affects versions of proxygen prior to v2020.05.18.00.
Facebook Proxygen
9.8
CVSSv3
CVE-2019-11921
An out of bounds write is possible via a specially crafted packet in certain configurations of Proxygen due to improper handling of Base64 when parsing malformed binary content in Structured HTTP Headers. This issue affects versions of proxygen prior to v2019.07.22.00.
Facebook Proxygen
9.8
CVSSv3
CVE-2019-11940
In the course of decompressing HPACK inside the HTTP2 protocol, an unexpected sequence of header table resize operations can place the header table into a corrupted state, leading to a use-after-free condition and undefined behavior. This issue affects Proxygen from v0.29.0 until...
Facebook Proxygen
7.5
CVSSv3
CVE-2015-7265
Facebook Proxygen prior to 2015-11-09 mismanages HTTPMessage.request state, which allows remote malicious users to conduct hijacking attacks and bypass ACL checks.
Proxygen Project Proxygen
9.8
CVSSv3
CVE-2015-7264
The SPDY/2 codec in Facebook Proxygen prior to 2015-11-09 truncates a certain field to two bytes, which allows hijacking and injection attacks.
Proxygen Project Proxygen
7.5
CVSSv3
CVE-2015-7263
The SPDY/2 codec in Facebook Proxygen prior to 2015-11-09 allows remote malicious users to conduct hijacking attacks and bypass ACL checks via a crafted host value.
Proxygen Project Proxygen
5.9
CVSSv3
CVE-2018-6332
A potential denial-of-service issue in the Proxygen handling of invalid HTTP2 settings which can cause the server to spend disproportionate resources. This affects all supported versions of HHVM (3.24.3 and 3.21.7 and below) when using the proxygen server to handle HTTP2 requests...
Facebook Hhvm
Facebook Hhvm 3.24.3
7.5
CVSSv3
CVE-2018-6335
A Malformed h2 frame can cause 'std::out_of_range' exception when parsing priority meta data. This behavior can lead to denial-of-service. This affects all supported versions of HHVM (3.25.2, 3.24.6, and 3.21.10 and below) when using the proxygen server to handle HTTP2 ...
Facebook Hhvm
Facebook Hhvm 3.24.6
Facebook Hhvm 3.25.2
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
type confusion
IMAP
CVE-2024-36103
CVE-2024-28995
CVE-2024-37325
CVE-2024-30078
CVE-2024-30082
SQL injection
CVE-2024-30052
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
NEXT »