Aller au contenu
Se connecter
7.5 Élevée

CVE-2018-6343 Proxygen fails to validate that a secondary auth manager is set before dereferencing it

Description

Proxygen fails to validate that a secondary auth manager is set before dereferencing it. That can cause a denial of service issue when parsing a Certificate/CertificateRequest HTTP2 Frame over a fizz (TLS 1.3) transport. This issue affects Proxygen releases starting from v2018.10.29.00 until the fix in v2018.11.19.00.

Produits et versions touchés

Produit Versions touchées Corrigé en
Proxygen 2018.11.19.00 Pas de correctif indiqué
Proxygen 2018.10 2018.10.29.00 → dernières Pas de correctif indiqué

Autres CVE de Proxygen

Les 12 CVE de Proxygen →
CVE-2026-91096 In proxygen from v2024.10.28.00 until v2026.09.28.00, WebTransportImpl::terminateSessionStreams… 7.5 Élevée CVE-2026-91095 In proxygen from v2024.10.28.00 until v2026.09.28.00, the HTTPTransaction::onWebTransportUniStream and… 5.3 Moyenne CVE-2026-84895 In proxygen from v2026.04.06.00 until v2026.09.28.00, QuicWtSession::closeSession accesses its member fields after… 7.3 Élevée CVE-2026-44909 Proxygen lacked a generalized slow-consumer detection mechanism in its core HTTP session layer 7.5 Élevée
Suivre cette CVE