Out of Bounds Write Vulnerability in Proxygen by Facebook
CVE-2019-11921

9.8CRITICAL

Key Information:

Vendor

Facebook

Status
Proxygen
Vendor
CVE Published:
25 July 2019

What is CVE-2019-11921?

An out of bounds write vulnerability exists in Proxygen due to improper parsing of malformed binary content within Structured HTTP Headers. This flaw can be triggered by sending specially crafted packets, affecting specific configurations of the software. Versions of Proxygen prior to v2019.07.22.00 are susceptible to this issue, posing risks to applications that rely on this framework for HTTP handling. Remediation efforts should focus on updating to the latest version to mitigate potential security threats.

Affected Version(s)

Proxygen v2019.07.22.00

Proxygen < unspecified

References

https://github.com/facebook/proxygen/commit/2f07985bef9fb...
x_refsource_MISC
https://www.facebook.com/security/advisories/cve-2019-11921
x_refsource_CONFIRM

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.