8.1
Élevée
CVE-2018-6340 The Memcache::getextendedstats function can be used to trigger an out-of-bounds read
Description
The Memcache::getextendedstats function can be used to trigger an out-of-bounds read. Exploiting this issue requires control over memcached server hostnames and/or ports. This affects all supported versions of HHVM (3.30 and 3.27.4 and below).
Produits et versions touchés
Autres CVE de HHVM
Les 31 CVE de HHVM →
CVE-2022-36937
HHVM 4.172.0 and all prior versions use TLS 1.0 for secure connections when handling tls:// URLs in the stream extension
9.8
Critique
CVE-2019-3556
HHVM supports the use of an "admin" server which accepts administrative requests over HTTP
Non notée
CVE-2021-24036
Passing an attacker controlled size when creating an IOBuf could cause integer overflow, leading to an out of bounds…
Non notée
CVE-2020-1900
When unserializing an object with dynamic properties HHVM needs to pre-reserve the full size of the dynamic property…
Non notée