未評価
A Malformed h2 frame can cause 'std::out_of_range' exception when parsing priority meta data. This behavior can lead to denial-of-service. This affect...
CVE-2018-6335
SecPulse初出
原文の説明 取得元が公開している説明をそのまま載せています (多くは英語)。
A Malformed h2 frame can cause 'std::out_of_range' exception when parsing priority meta data. This behavior can lead to denial-of-service. This affects all supported versions of HHVM (3.25.2, 3.24.6, and 3.21.10 and below) when using the proxygen server to handle HTTP2 requests.
参照URL
- advisory hhvm.com
- patch github.com