CVE-2018-6347

HIGH 7.5CVE-2018-6347 · Published 31/12/2018 · updated 17/06/2026

In short

CVE-2018-6347 is a HIGH (CVSS 7.5) vulnerability affecting proxygen (proxygen project).
Chance of exploitation in the next 30 days (EPSS): 1.4%, higher than 72.0% of all vulnerabilities.
Fix: update to 2018.12.31.00 or later.

Package	Affected versions	Patched versions
proxygen proxygen_project	`< 2018.12.31.00`	`2018.12.31.00`

Description

An issue in the Proxygen handling of HTTP2 parsing of headers/trailers can lead to a denial-of-service attack. This affects Proxygen prior to v2018.12.31.00.

References

facebook/proxygen commit 223e0aa · Patch

More vulnerabilities in proxygen

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free