CVE-2016-6870

Mô tả

Tham khảo

• openwall.com/lists/oss-security/2016/08/11/1 · Mailing List
• openwall.com/lists/oss-security/2016/08/19/1 · Mailing List
• facebook/hhvm commit 365abe8 · Patch

Lỗ hổng khác của hhvm

• CVE-2022-36937NGHIÊM TRỌNG 9.8HHVM 4.172.0 and all prior versions use TLS 1.0 for secure connections when handling tls:// URLs in the stream extension. TLS1.0 has numerou…
• CVE-2019-3556CAO 8.1HHVM supports the use of an "admin" server which accepts administrative requests over HTTP. One of those request handlers, dump-pcre-cache, …
• CVE-2021-24036NGHIÊM TRỌNG 9.8Passing an attacker controlled size when creating an IOBuf could cause integer overflow, leading to an out of bounds write on the heap with …
• CVE-2020-1900NGHIÊM TRỌNG 9.8When unserializing an object with dynamic properties HHVM needs to pre-reserve the full size of the dynamic property array before inserting …
• CVE-2020-1899CAO 7.5The unserialize() function supported a type code, "S", which was meant to be supported only for APC serialization. This type code allowed ar…