CVE-2018-6332

Name of the Vulnerable Software and Affected Versions HHVM versions 3.24.3 and 3.21.7 and below

Description A potential denial-of-service issue exists in the Proxygen handling of invalid HTTP2 settings, causing the server to spend disproportionate resources when handling HTTP2 requests using the proxygen server.

Recommendations For HHVM versions 3.24.3 and 3.21.7 and below, consider disabling the use of the proxygen server for handling HTTP2 requests as a temporary workaround until a patch is available. Restrict access to the proxygen server to minimize the risk of exploitation.