Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2018-6335

Опубликовано: 31 дек. 2018
Источник: nvd
CVSS3: 7.5
CVSS3: 7.5
CVSS2: 5
EPSS Низкий

Описание

A Malformed h2 frame can cause 'std::out_of_range' exception when parsing priority meta data. This behavior can lead to denial-of-service. This affects all supported versions of HHVM (3.25.2, 3.24.6, and 3.21.10 and below) when using the proxygen server to handle HTTP2 requests.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:facebook:hhvm:*:*:*:*:*:*:*:*
Версия до 3.21.10 (включая)
cpe:2.3:a:facebook:hhvm:3.24.6:*:*:*:*:*:*:*
cpe:2.3:a:facebook:hhvm:3.25.2:*:*:*:*:*:*:*

EPSS

Процентиль: 71%
0.00695
Низкий

7.5 High

CVSS3

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-400
CWE-20

Связанные уязвимости

CVSS3: 7.5
ubuntu
около 7 лет назад

A Malformed h2 frame can cause 'std::out_of_range' exception when parsing priority meta data. This behavior can lead to denial-of-service. This affects all supported versions of HHVM (3.25.2, 3.24.6, and 3.21.10 and below) when using the proxygen server to handle HTTP2 requests.

CVSS3: 7.5
debian
около 7 лет назад

A Malformed h2 frame can cause 'std::out_of_range' exception when pars ...

CVSS3: 7.5
github
больше 3 лет назад

A Malformed h2 frame can cause 'std::out_of_range' exception when parsing priority meta data. This behavior can lead to denial-of-service. This affects all supported versions of HHVM (3.25.2, 3.24.6, and 3.21.10 and below) when using the proxygen server to handle HTTP2 requests.

EPSS

Процентиль: 71%
0.00695
Низкий

7.5 High

CVSS3

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-400
CWE-20