NetSight
high7.5

CVE-2018-6335

A Malformed h2 frame can cause 'std::out_of_range' exception when parsing priority meta data.

Impact

A Malformed h2 frame can cause 'std::out_of_range' exception when parsing priority meta data. This behavior can lead to denial-of-service. This affects all supported versions of HHVM (3.25.2, 3.24.6, and 3.21.10 and below) when using the proxygen server to handle HTTP2 requests.

Affected products

VendorProductAffected versions
FacebookHhvm
through 3.21.10
Versions 3.24.6, 3.25.2

Weakness classification

References