CVE-2018-6332CWE-400

A potential denial-of-service issue in the Proxygen handling of invalid HTTP2 settings which can cause the server to spend disproportionate resources

Medium · published December 3, 2018

CVSS v3.1
5.9
EPSS
1%
Percentile
65.0
In the wild
Unconfirmed
What it is

A potential denial-of-service issue in the Proxygen handling of invalid HTTP2 settings which can cause the server to spend disproportionate resources. This affects all supported versions of HHVM (3.24.3 and 3.21.7 and below) when using the proxygen server to handle HTTP2 requests.

The record
Technical detail
CVSS v3.1
5.9 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.01086 · 65.0th percentile
Weakness
CWE-400 · Uncontrolled Resource Consumption
Published
2018-12-03T14:00Z
EPSS history
Timeline
  • 03 DEC 14:00Z
    A potential denial-of-service issue in the Proxygen handling of invalid HTTP2 settings which can cause the server to spend disproportionate resources
    cvelistv5