CVE-2020-1919 - Vulnerability Details

Vendors	Products
Facebook	Hhvm

Link	Providers
https://github.com/facebook/hhvm/commit/08193b7f0cd3910256e00d599f0f3eb2519c44ca
https://hhvm.com/blog/2021/02/25/security-update.html

Show plain JSON

{"containers": {"cna": {"affected": [{"product": "HHVM", "vendor": "Facebook", "versions": [{"lessThan": "unspecified", "status": "unaffected", "version": "4.98.1", "versionType": "custom"}, {"status": "affected", "version": "4.98.0"}, {"lessThan": "unspecified", "status": "unaffected", "version": "4.97.1", "versionType": "custom"}, {"status": "affected", "version": "4.97.0"}, {"lessThan": "unspecified", "status": "unaffected", "version": "4.96.1", "versionType": "custom"}, {"status": "affected", "version": "4.96.0"}, {"lessThan": "unspecified", "status": "unaffected", "version": "4.95.1", "versionType": "custom"}, {"status": "affected", "version": "4.95.0"}, {"lessThan": "unspecified", "status": "unaffected", "version": "4.94.1", "versionType": "custom"}, {"status": "affected", "version": "4.94.0"}, {"lessThan": "unspecified", "status": "unaffected", "version": "4.93.2", "versionType": "custom"}, {"lessThan": "unspecified", "status": "affected", "version": "4.81.0", "versionType": "custom"}, {"lessThan": "unspecified", "status": "unaffected", "version": "4.80.2", "versionType": "custom"}, {"lessThan": "unspecified", "status": "affected", "version": "4.57.0", "versionType": "custom"}, {"lessThan": "unspecified", "status": "unaffected", "version": "4.56.3", "versionType": "custom"}, {"lessThan": "4.56.3", "status": "affected", "version": "unspecified", "versionType": "custom"}]}], "dateAssigned": "2020-12-11T00:00:00", "descriptions": [{"lang": "en", "value": "Incorrect bounds calculations in substr_compare could lead to an out-of-bounds read when the second string argument passed in is longer than the first. This issue affects HHVM versions prior to 4.56.3, all versions between 4.57.0 and 4.80.1, all versions between 4.81.0 and 4.93.1, and versions 4.94.0, 4.95.0, 4.96.0, 4.97.0, 4.98.0."}], "problemTypes": [{"descriptions": [{"cweId": "CWE-125", "description": "Out-of-bounds Read (CWE-125)", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"dateUpdated": "2021-03-10T15:50:29", "orgId": "4fc57720-52fe-4431-a0fb-3d2c8747b827", "shortName": "facebook"}, "references": [{"tags": ["x_refsource_MISC"], "url": "https://hhvm.com/blog/2021/02/25/security-update.html"}, {"tags": ["x_refsource_MISC"], "url": "https://github.com/facebook/hhvm/commit/08193b7f0cd3910256e00d599f0f3eb2519c44ca"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve-assign@fb.com", "DATE_ASSIGNED": "2020-12-11", "ID": "CVE-2020-1919", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "HHVM", "version": {"version_data": [{"version_affected": "!>=", "version_value": "4.98.1"}, {"version_affected": "=", "version_value": "4.98.0"}, {"version_affected": "!>=", "version_value": "4.97.1"}, {"version_affected": "=", "version_value": "4.97.0"}, {"version_affected": "!>=", "version_value": "4.96.1"}, {"version_affected": "=", "version_value": "4.96.0"}, {"version_affected": "!>=", "version_value": "4.95.1"}, {"version_affected": "=", "version_value": "4.95.0"}, {"version_affected": "!>=", "version_value": "4.94.1"}, {"version_affected": "=", "version_value": "4.94.0"}, {"version_affected": "!>=", "version_value": "4.93.2"}, {"version_affected": ">=", "version_value": "4.81.0"}, {"version_affected": "!>=", "version_value": "4.80.2"}, {"version_affected": ">=", "version_value": "4.57.0"}, {"version_affected": "!>=", "version_value": "4.56.3"}, {"version_affected": "<", "version_value": "4.56.3"}]}}]}, "vendor_name": "Facebook"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Incorrect bounds calculations in substr_compare could lead to an out-of-bounds read when the second string argument passed in is longer than the first. This issue affects HHVM versions prior to 4.56.3, all versions between 4.57.0 and 4.80.1, all versions between 4.81.0 and 4.93.1, and versions 4.94.0, 4.95.0, 4.96.0, 4.97.0, 4.98.0."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "Out-of-bounds Read (CWE-125)"}]}]}, "references": {"reference_data": [{"name": "https://hhvm.com/blog/2021/02/25/security-update.html", "refsource": "MISC", "url": "https://hhvm.com/blog/2021/02/25/security-update.html"}, {"name": "https://github.com/facebook/hhvm/commit/08193b7f0cd3910256e00d599f0f3eb2519c44ca", "refsource": "MISC", "url": "https://github.com/facebook/hhvm/commit/08193b7f0cd3910256e00d599f0f3eb2519c44ca"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-04T06:53:59.858Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://hhvm.com/blog/2021/02/25/security-update.html"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://github.com/facebook/hhvm/commit/08193b7f0cd3910256e00d599f0f3eb2519c44ca"}]}]}, "cveMetadata": {"assignerOrgId": "4fc57720-52fe-4431-a0fb-3d2c8747b827", "assignerShortName": "facebook", "cveId": "CVE-2020-1919", "datePublished": "2021-03-10T15:50:29", "dateReserved": "2019-12-02T00:00:00", "dateUpdated": "2024-08-04T06:53:59.858Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{

containers : { »

cna : { »

affected : [ »

0 : { »

product : HHVM (string)

vendor : Facebook (string)

versions : [ »

0 : { »

lessThan : unspecified (string)

status : unaffected (string)

version : 4.98.1 (string)

versionType : custom (string)

}

1 : { »

status : affected (string)

version : 4.98.0 (string)

}

2 : { »

lessThan : unspecified (string)

status : unaffected (string)

version : 4.97.1 (string)

versionType : custom (string)

}

3 : { »

status : affected (string)

version : 4.97.0 (string)

}

4 : { »

lessThan : unspecified (string)

status : unaffected (string)

version : 4.96.1 (string)

versionType : custom (string)

}

5 : { »

status : affected (string)

version : 4.96.0 (string)

}

6 : { »

lessThan : unspecified (string)

status : unaffected (string)

version : 4.95.1 (string)

versionType : custom (string)

}

7 : { »

status : affected (string)

version : 4.95.0 (string)

}

8 : { »

lessThan : unspecified (string)

status : unaffected (string)

version : 4.94.1 (string)

versionType : custom (string)

}

9 : { »

status : affected (string)

version : 4.94.0 (string)

}

10 : { »

lessThan : unspecified (string)

status : unaffected (string)

version : 4.93.2 (string)

versionType : custom (string)

}

11 : { »

lessThan : unspecified (string)

status : affected (string)

version : 4.81.0 (string)

versionType : custom (string)

}

12 : { »

lessThan : unspecified (string)

status : unaffected (string)

version : 4.80.2 (string)

versionType : custom (string)

}

13 : { »

lessThan : unspecified (string)

status : affected (string)

version : 4.57.0 (string)

versionType : custom (string)

}

14 : { »

lessThan : unspecified (string)

status : unaffected (string)

version : 4.56.3 (string)

versionType : custom (string)

}

15 : { »

lessThan : 4.56.3 (string)

status : affected (string)

version : unspecified (string)

versionType : custom (string)

}

]

}

]

dateAssigned : 2020-12-11T00:00:00 (string)

descriptions : [ »

0 : { »

lang : en (string)

value : Incorrect bounds calculations in substr_compare could lead to an out-of-bounds read when the second string argument passed in is longer than the first. This issue affects HHVM versions prior to 4.56.3, all versions between 4.57.0 and 4.80.1, all versions between 4.81.0 and 4.93.1, and versions 4.94.0, 4.95.0, 4.96.0, 4.97.0, 4.98.0. (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

cweId : CWE-125 (string)

description : Out-of-bounds Read (CWE-125) (string)

lang : en (string)

type : CWE (string)

}

]

}

]

providerMetadata : { »

dateUpdated : 2021-03-10T15:50:29 (string)

orgId : 4fc57720-52fe-4431-a0fb-3d2c8747b827 (string)

shortName : facebook (string)

}

references : [ »

0 : { »

tags : [ »

0 : x_refsource_MISC (string)

]

url : https://hhvm.com/blog/2021/02/25/security-update.html (string)

}

1 : { »

tags : [ »

0 : x_refsource_MISC (string)

]

url : https://github.com/facebook/hhvm/commit/08193b7f0cd3910256e00d599f0f3eb2519c44ca (string)

}

]

x_legacyV4Record : { »

CVE_data_meta : { »

ASSIGNER : cve-assign@fb.com (string)

DATE_ASSIGNED : 2020-12-11 (string)

ID : CVE-2020-1919 (string)

STATE : PUBLIC (string)

}

affects : { »

vendor : { »

vendor_data : [ »

0 : { »

product : { »

product_data : [ »

0 : { »

product_name : HHVM (string)

version : { »

version_data : [ »

0 : { »

version_affected : !>= (string)

version_value : 4.98.1 (string)

}

1 : { »

version_affected : = (string)

version_value : 4.98.0 (string)

}

2 : { »

version_affected : !>= (string)

version_value : 4.97.1 (string)

}

3 : { »

version_affected : = (string)

version_value : 4.97.0 (string)

}

4 : { »

version_affected : !>= (string)

version_value : 4.96.1 (string)

}

5 : { »

version_affected : = (string)

version_value : 4.96.0 (string)

}

6 : { »

version_affected : !>= (string)

version_value : 4.95.1 (string)

}

7 : { »

version_affected : = (string)

version_value : 4.95.0 (string)

}

8 : { »

version_affected : !>= (string)

version_value : 4.94.1 (string)

}

9 : { »

version_affected : = (string)

version_value : 4.94.0 (string)

}

10 : { »

version_affected : !>= (string)

version_value : 4.93.2 (string)

}

11 : { »

version_affected : >= (string)

version_value : 4.81.0 (string)

}

12 : { »

version_affected : !>= (string)

version_value : 4.80.2 (string)

}

13 : { »

version_affected : >= (string)

version_value : 4.57.0 (string)

}

14 : { »

version_affected : !>= (string)

version_value : 4.56.3 (string)

}

15 : { »

version_affected : < (string)

version_value : 4.56.3 (string)

}

]

}

]

}

vendor_name : Facebook (string)

}

]

}

data_format : MITRE (string)

data_type : CVE (string)

data_version : 4.0 (string)

description : { »

description_data : [ »

0 : { »

lang : eng (string)

value : Incorrect bounds calculations in substr_compare could lead to an out-of-bounds read when the second string argument passed in is longer than the first. This issue affects HHVM versions prior to 4.56.3, all versions between 4.57.0 and 4.80.1, all versions between 4.81.0 and 4.93.1, and versions 4.94.0, 4.95.0, 4.96.0, 4.97.0, 4.98.0. (string)

}

]

}

problemtype : { »

problemtype_data : [ »

0 : { »

description : [ »

0 : { »

lang : eng (string)

value : Out-of-bounds Read (CWE-125) (string)

}

]

}

]

}

references : { »

reference_data : [ »

0 : { »

name : https://hhvm.com/blog/2021/02/25/security-update.html (string)

refsource : MISC (string)

url : https://hhvm.com/blog/2021/02/25/security-update.html (string)

}

1 : { »

name : https://github.com/facebook/hhvm/commit/08193b7f0cd3910256e00d599f0f3eb2519c44ca (string)

refsource : MISC (string)

url : https://github.com/facebook/hhvm/commit/08193b7f0cd3910256e00d599f0f3eb2519c44ca (string)

}

]

}

adp : [ »

0 : { »

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-04T06:53:59.858Z (string)

}

title : CVE Program Container (string)

references : [ »

0 : { »

tags : [ »

0 : x_refsource_MISC (string)

1 : x_transferred (string)

]

url : https://hhvm.com/blog/2021/02/25/security-update.html (string)

}

1 : { »

tags : [ »

0 : x_refsource_MISC (string)

1 : x_transferred (string)

]

url : https://github.com/facebook/hhvm/commit/08193b7f0cd3910256e00d599f0f3eb2519c44ca (string)

}

]

}

]

}

cveMetadata : { »

assignerOrgId : 4fc57720-52fe-4431-a0fb-3d2c8747b827 (string)

assignerShortName : facebook (string)

cveId : CVE-2020-1919 (string)

datePublished : 2021-03-10T15:50:29 (string)

dateReserved : 2019-12-02T00:00:00 (string)

dateUpdated : 2024-08-04T06:53:59.858Z (string)

state : PUBLISHED (string)

}

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:facebook:hhvm:*:*:*:*:*:*:*:*", "matchCriteriaId": "069C0B7D-5233-4EFF-BBA7-8B84D9227044", "versionEndExcluding": "4.56.3", "vulnerable": true}, {"criteria": "cpe:2.3:a:facebook:hhvm:*:*:*:*:*:*:*:*", "matchCriteriaId": "59DAD37C-9F51-4BE3-B045-537CA259F7F7", "versionEndExcluding": "4.80.2", "versionStartIncluding": "4.57.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:facebook:hhvm:*:*:*:*:*:*:*:*", "matchCriteriaId": "3B78720F-AA79-459F-A66C-5C4D67D7EE31", "versionEndExcluding": "4.93.2", "versionStartIncluding": "4.81.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:facebook:hhvm:4.94.0:*:*:*:*:*:*:*", "matchCriteriaId": "1C4B9A3C-6A5A-45C4-A490-C13CF6D6A867", "vulnerable": true}, {"criteria": "cpe:2.3:a:facebook:hhvm:4.95.0:*:*:*:*:*:*:*", "matchCriteriaId": "18D33DC0-E6A7-4DC6-8E9A-2B85842EC21B", "vulnerable": true}, {"criteria": "cpe:2.3:a:facebook:hhvm:4.96.0:*:*:*:*:*:*:*", "matchCriteriaId": "B0B9078D-3C25-45B2-B5F2-59585A47BACB", "vulnerable": true}, {"criteria": "cpe:2.3:a:facebook:hhvm:4.97.0:*:*:*:*:*:*:*", "matchCriteriaId": "7B8F5C11-8610-4099-8A45-E6241F3D24E0", "vulnerable": true}, {"criteria": "cpe:2.3:a:facebook:hhvm:4.98.0:*:*:*:*:*:*:*", "matchCriteriaId": "47FF13C3-19DC-4F53-BF9D-38AC89D647D5", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "Incorrect bounds calculations in substr_compare could lead to an out-of-bounds read when the second string argument passed in is longer than the first. This issue affects HHVM versions prior to 4.56.3, all versions between 4.57.0 and 4.80.1, all versions between 4.81.0 and 4.93.1, and versions 4.94.0, 4.95.0, 4.96.0, 4.97.0, 4.98.0."}, {"lang": "es", "value": "Unos c\u00e1lculos de l\u00edmites incorrectos en la funci\u00f3n substr_compare podr\u00edan conllevar a una lectura fuera de l\u00edmites cuando el segundo argumento de cadena pasado es m\u00e1s largo que el primero.&#xa0;Este problema afecta a HHVM versiones anteriores a 4.56.3, todas las versiones entre 4.57.0 y 4.80.1, todas las versiones entre 4.81.0 y 4.93.1 y las versiones 4.94.0, 4.95.0, 4.96.0, 4.97.0 , 4.98.0"}], "id": "CVE-2020-1919", "lastModified": "2024-11-21T05:11:36.773", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2021-03-10T16:15:14.470", "references": [{"source": "cve-assign@fb.com", "tags": ["Patch", "Third Party Advisory"], "url": "https://github.com/facebook/hhvm/commit/08193b7f0cd3910256e00d599f0f3eb2519c44ca"}, {"source": "cve-assign@fb.com", "tags": ["Release Notes", "Vendor Advisory"], "url": "https://hhvm.com/blog/2021/02/25/security-update.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Third Party Advisory"], "url": "https://github.com/facebook/hhvm/commit/08193b7f0cd3910256e00d599f0f3eb2519c44ca"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Release Notes", "Vendor Advisory"], "url": "https://hhvm.com/blog/2021/02/25/security-update.html"}], "sourceIdentifier": "cve-assign@fb.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-125"}], "source": "cve-assign@fb.com", "type": "Secondary"}, {"description": [{"lang": "en", "value": "CWE-125"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:a:facebook:hhvm:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 069C0B7D-5233-4EFF-BBA7-8B84D9227044 (string)

versionEndExcluding : 4.56.3 (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:a:facebook:hhvm:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 59DAD37C-9F51-4BE3-B045-537CA259F7F7 (string)

versionEndExcluding : 4.80.2 (string)

versionStartIncluding : 4.57.0 (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:a:facebook:hhvm:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 3B78720F-AA79-459F-A66C-5C4D67D7EE31 (string)

versionEndExcluding : 4.93.2 (string)

versionStartIncluding : 4.81.0 (string)

vulnerable : true (boolean)

}

3 : { »

criteria : cpe:2.3:a:facebook:hhvm:4.94.0:*:*:*:*:*:*:* (string)

matchCriteriaId : 1C4B9A3C-6A5A-45C4-A490-C13CF6D6A867 (string)

vulnerable : true (boolean)

}

4 : { »

criteria : cpe:2.3:a:facebook:hhvm:4.95.0:*:*:*:*:*:*:* (string)

matchCriteriaId : 18D33DC0-E6A7-4DC6-8E9A-2B85842EC21B (string)

vulnerable : true (boolean)

}

5 : { »

criteria : cpe:2.3:a:facebook:hhvm:4.96.0:*:*:*:*:*:*:* (string)

matchCriteriaId : B0B9078D-3C25-45B2-B5F2-59585A47BACB (string)

vulnerable : true (boolean)

}

6 : { »

criteria : cpe:2.3:a:facebook:hhvm:4.97.0:*:*:*:*:*:*:* (string)

matchCriteriaId : 7B8F5C11-8610-4099-8A45-E6241F3D24E0 (string)

vulnerable : true (boolean)

}

7 : { »

criteria : cpe:2.3:a:facebook:hhvm:4.98.0:*:*:*:*:*:*:* (string)

matchCriteriaId : 47FF13C3-19DC-4F53-BF9D-38AC89D647D5 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : Incorrect bounds calculations in substr_compare could lead to an out-of-bounds read when the second string argument passed in is longer than the first. This issue affects HHVM versions prior to 4.56.3, all versions between 4.57.0 and 4.80.1, all versions between 4.81.0 and 4.93.1, and versions 4.94.0, 4.95.0, 4.96.0, 4.97.0, 4.98.0. (string)

}

1 : { »

lang : es (string)

value : Unos cálculos de límites incorrectos en la función substr_compare podrían conllevar a una lectura fuera de límites cuando el segundo argumento de cadena pasado es más largo que el primero. Este problema afecta a HHVM versiones anteriores a 4.56.3, todas las versiones entre 4.57.0 y 4.80.1, todas las versiones entre 4.81.0 y 4.93.1 y las versiones 4.94.0, 4.95.0, 4.96.0, 4.97.0 , 4.98.0 (string)

}

]

id : CVE-2020-1919 (string)

lastModified : 2024-11-21T05:11:36.773 (string)

metrics : { »

cvssMetricV2 : [ »

0 : { »

acInsufInfo : false (boolean)

baseSeverity : MEDIUM (string)

cvssData : { »

accessComplexity : LOW (string)

accessVector : NETWORK (string)

authentication : NONE (string)

availabilityImpact : NONE (string)

baseScore : 5 (number)

confidentialityImpact : PARTIAL (string)

integrityImpact : NONE (string)

vectorString : AV:N/AC:L/Au:N/C:P/I:N/A:N (string)

version : 2.0 (string)

}

exploitabilityScore : 10 (number)

impactScore : 2.9 (number)

obtainAllPrivilege : false (boolean)

obtainOtherPrivilege : false (boolean)

obtainUserPrivilege : false (boolean)

source : nvd@nist.gov (string)

type : Primary (string)

userInteractionRequired : false (boolean)

}

]

cvssMetricV31 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : NONE (string)

baseScore : 7.5 (number)

baseSeverity : HIGH (string)

confidentialityImpact : HIGH (string)

integrityImpact : NONE (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N (string)

version : 3.1 (string)

}

exploitabilityScore : 3.9 (number)

impactScore : 3.6 (number)

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

published : 2021-03-10T16:15:14.470 (string)

references : [ »

0 : { »

source : cve-assign@fb.com (string)

tags : [ »

0 : Patch (string)

1 : Third Party Advisory (string)

]

url : https://github.com/facebook/hhvm/commit/08193b7f0cd3910256e00d599f0f3eb2519c44ca (string)

}

1 : { »

source : cve-assign@fb.com (string)

tags : [ »

0 : Release Notes (string)

1 : Vendor Advisory (string)

]

url : https://hhvm.com/blog/2021/02/25/security-update.html (string)

}

2 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Patch (string)

1 : Third Party Advisory (string)

]

url : https://github.com/facebook/hhvm/commit/08193b7f0cd3910256e00d599f0f3eb2519c44ca (string)

}

3 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Release Notes (string)

1 : Vendor Advisory (string)

]

url : https://hhvm.com/blog/2021/02/25/security-update.html (string)

}

]

sourceIdentifier : cve-assign@fb.com (string)

vulnStatus : Modified (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-125 (string)

}

]

source : cve-assign@fb.com (string)

type : Secondary (string)

}

1 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-125 (string)

}

]

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction None

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact Partial

Integrity Impact None

Availability Impact None

Affected Vendors & Products

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction None

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact Partial

Integrity Impact None

Availability Impact None

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object