CVE-2018-6346 - AskarLabs CVE Database

CVE-2018-6346

Vendor Facebook

Product Proxygen

Weakness CWE-400

Published December 31, 2018

Last update May 6, 2025

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

A potential denial-of-service issue in the Proxygen handling of invalid HTTP2 priority settings (specifically a circular dependency). This affects Proxygen prior to v2018.12.31.00.

Key dates

02Disclosure timeline

December 31, 2018 CVE published

May 6, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2018-6346 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/400.html

Related vulnerabilities

04Related CVE

CVE-2025-49000 InvenTree has uncontrolled memory allocation via built-in label-sheet plugin CVE-2023-25769 CVE-2022-33303 Uncontrolled resource consumption in Linux kernel CVE-2026-42154 Prometheus: remote read endpoint allows denial of service via crafted snappy payload CVE-2024-12864 Unauthenticated DoS by Sending Large Filename at File Upload Endpoint in netease-youdao/qanything

Identifiers

CVE CVE-2018-6346

CWE CWE-400

Affected versions

Vendor Facebook

Product Proxygen

Affected v2018.12.31.00

Vendor Facebook

Product Proxygen

Affected ≥ unspecified and < v2018.12.31.00