Skip to content
Sign in
7.5 High

CVE-2018-6343 Proxygen fails to validate that a secondary auth manager is set before dereferencing it

Description

Proxygen fails to validate that a secondary auth manager is set before dereferencing it. That can cause a denial of service issue when parsing a Certificate/CertificateRequest HTTP2 Frame over a fizz (TLS 1.3) transport. This issue affects Proxygen releases starting from v2018.10.29.00 until the fix in v2018.11.19.00.

Affected products and versions

Product Affected versions Fixed in
Proxygen 2018.11.19.00 No fix stated
Proxygen 2018.10 2018.10.29.00 → latest No fix stated

Other CVEs of Proxygen

The 12 CVEs of Proxygen →
CVE-2026-91096 In proxygen from v2024.10.28.00 until v2026.09.28.00, WebTransportImpl::terminateSessionStreams… 7.5 High CVE-2026-91095 In proxygen from v2024.10.28.00 until v2026.09.28.00, the HTTPTransaction::onWebTransportUniStream and… 5.3 Medium CVE-2026-84895 In proxygen from v2026.04.06.00 until v2026.09.28.00, QuicWtSession::closeSession accesses its member fields after… 7.3 High CVE-2026-44909 Proxygen lacked a generalized slow-consumer detection mechanism in its core HTTP session layer 7.5 High
Track this CVE