CVE-2018-6347 - AskarLabs CVE Database

CVE-2018-6347

Vendor Facebook

Product Proxygen

Weakness CWE-400

Published December 31, 2018

Last update May 6, 2025

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

An issue in the Proxygen handling of HTTP2 parsing of headers/trailers can lead to a denial-of-service attack. This affects Proxygen prior to v2018.12.31.00.

Key dates

02Disclosure timeline

December 31, 2018 CVE published

May 6, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2018-6347 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/400.html

Related vulnerabilities

04Related CVE

CVE-2024-3056 Podman: kernel: containers in shared ipc namespace are vulnerable to denial of service attack CVE-2024-8892 Uncontrolled Resource Consumption vulnerability on CIRCUTOR TCP2RS+ CVE-2023-35767 Unauthenticated Remote Denial-of-Service via Shutdown Function in Helix Core CVE-2021-43838 Regular Expression Denial of Service (ReDoS) in jsx-slack CVE-2022-31006 Hyperledger Indy DOS vulnerability

Identifiers

CVE CVE-2018-6347

CWE CWE-400

Affected versions

Vendor Facebook

Product Proxygen

Affected v2018.12.31.00

Vendor Facebook

Product Proxygen

Affected ≥ unspecified and ≤ v2018.12.31.00