CVE-2014-9714

概要

参考情報

• openwall.com/lists/oss-security/2015/04/01/1
• openwall.com/lists/oss-security/2015/04/07/3
• securityfocus.com/bid/74061
• facebook/hhvm commit 324701c
• facebook/hhvm
• lists.wikimedia.org/pipermail/mediawiki-announce/2015-March/000175.html · Vendor Advisory
• phabricator.wikimedia.org/T85851 · Exploit

hiphop virtual machine のその他の脆弱性

• CVE-2019-3570緊急 9.8Call to the scrypt_enc() function in HHVM can lead to heap corruption by using specifically crafted parameters (N, r and p). This happens if…
• CVE-2014-6229中 5.0The HashContext class in hphp/runtime/ext/ext_hash.cpp in Facebook HipHop Virtual Machine (HHVM) before 3.3.0 incorrectly expects that a cer…
• CVE-2014-6228高 7.5Integer overflow in the string_chunk_split function in hphp/runtime/base/zend-string.cpp in Facebook HipHop Virtual Machine (HHVM) before 3.…
• CVE-2014-5386中 5.0The mcrypt_create_iv function in hphp/runtime/ext/mcrypt/ext_mcrypt.cpp in Facebook HipHop Virtual Machine (HHVM) before 3.3.0 does not seed…
• CVE-2014-2209中 5.0Facebook HipHop Virtual Machine (HHVM) before 3.1.0 does not drop supplemental group memberships within hphp/util/capability.cpp and hphp/ut…