CVE-2021-24025 - Vulnerability Details

Vendors	Products
Facebook	Hhvm

Link	Providers
https://github.com/facebook/hhvm/commit/08193b7f0cd3910256e00d599f0f3eb2519c44ca
https://hhvm.com/blog/2021/02/25/security-update.html

Show plain JSON

{"containers": {"cna": {"affected": [{"product": "HHVM", "vendor": "Facebook", "versions": [{"lessThan": "unspecified", "status": "unaffected", "version": "4.98.1", "versionType": "custom"}, {"status": "affected", "version": "4.98.0"}, {"lessThan": "unspecified", "status": "unaffected", "version": "4.97.1", "versionType": "custom"}, {"status": "affected", "version": "4.97.0"}, {"lessThan": "unspecified", "status": "unaffected", "version": "4.96.1", "versionType": "custom"}, {"status": "affected", "version": "4.96.0"}, {"lessThan": "unspecified", "status": "unaffected", "version": "4.95.1", "versionType": "custom"}, {"status": "affected", "version": "4.95.0"}, {"lessThan": "unspecified", "status": "unaffected", "version": "4.94.1", "versionType": "custom"}, {"status": "affected", "version": "4.94.0"}, {"lessThan": "unspecified", "status": "unaffected", "version": "4.93.2", "versionType": "custom"}, {"lessThan": "unspecified", "status": "affected", "version": "4.81.0", "versionType": "custom"}, {"lessThan": "unspecified", "status": "unaffected", "version": "4.80.2", "versionType": "custom"}, {"lessThan": "unspecified", "status": "affected", "version": "4.57.0", "versionType": "custom"}, {"lessThan": "unspecified", "status": "unaffected", "version": "4.56.3", "versionType": "custom"}, {"lessThan": "4.56.3", "status": "affected", "version": "unspecified", "versionType": "custom"}]}], "dateAssigned": "2021-01-27T00:00:00", "descriptions": [{"lang": "en", "value": "Due to incorrect string size calculations inside the preg_quote function, a large input string passed to the function can trigger an integer overflow leading to a heap overflow. This issue affects HHVM versions prior to 4.56.3, all versions between 4.57.0 and 4.80.1, all versions between 4.81.0 and 4.93.1, and versions 4.94.0, 4.95.0, 4.96.0, 4.97.0, 4.98.0."}], "problemTypes": [{"descriptions": [{"cweId": "CWE-122", "description": "Heap-based Buffer Overflow (CWE-122)", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"dateUpdated": "2021-03-10T15:50:30", "orgId": "4fc57720-52fe-4431-a0fb-3d2c8747b827", "shortName": "facebook"}, "references": [{"tags": ["x_refsource_MISC"], "url": "https://hhvm.com/blog/2021/02/25/security-update.html"}, {"tags": ["x_refsource_MISC"], "url": "https://github.com/facebook/hhvm/commit/08193b7f0cd3910256e00d599f0f3eb2519c44ca"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve-assign@fb.com", "DATE_ASSIGNED": "2021-01-27", "ID": "CVE-2021-24025", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "HHVM", "version": {"version_data": [{"version_affected": "!>=", "version_value": "4.98.1"}, {"version_affected": "=", "version_value": "4.98.0"}, {"version_affected": "!>=", "version_value": "4.97.1"}, {"version_affected": "=", "version_value": "4.97.0"}, {"version_affected": "!>=", "version_value": "4.96.1"}, {"version_affected": "=", "version_value": "4.96.0"}, {"version_affected": "!>=", "version_value": "4.95.1"}, {"version_affected": "=", "version_value": "4.95.0"}, {"version_affected": "!>=", "version_value": "4.94.1"}, {"version_affected": "=", "version_value": "4.94.0"}, {"version_affected": "!>=", "version_value": "4.93.2"}, {"version_affected": ">=", "version_value": "4.81.0"}, {"version_affected": "!>=", "version_value": "4.80.2"}, {"version_affected": ">=", "version_value": "4.57.0"}, {"version_affected": "!>=", "version_value": "4.56.3"}, {"version_affected": "<", "version_value": "4.56.3"}]}}]}, "vendor_name": "Facebook"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Due to incorrect string size calculations inside the preg_quote function, a large input string passed to the function can trigger an integer overflow leading to a heap overflow. This issue affects HHVM versions prior to 4.56.3, all versions between 4.57.0 and 4.80.1, all versions between 4.81.0 and 4.93.1, and versions 4.94.0, 4.95.0, 4.96.0, 4.97.0, 4.98.0."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "Heap-based Buffer Overflow (CWE-122)"}]}]}, "references": {"reference_data": [{"name": "https://hhvm.com/blog/2021/02/25/security-update.html", "refsource": "MISC", "url": "https://hhvm.com/blog/2021/02/25/security-update.html"}, {"name": "https://github.com/facebook/hhvm/commit/08193b7f0cd3910256e00d599f0f3eb2519c44ca", "refsource": "MISC", "url": "https://github.com/facebook/hhvm/commit/08193b7f0cd3910256e00d599f0f3eb2519c44ca"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-03T19:14:10.116Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://hhvm.com/blog/2021/02/25/security-update.html"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://github.com/facebook/hhvm/commit/08193b7f0cd3910256e00d599f0f3eb2519c44ca"}]}]}, "cveMetadata": {"assignerOrgId": "4fc57720-52fe-4431-a0fb-3d2c8747b827", "assignerShortName": "facebook", "cveId": "CVE-2021-24025", "datePublished": "2021-03-10T15:50:30", "dateReserved": "2021-01-13T00:00:00", "dateUpdated": "2024-08-03T19:14:10.116Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{

containers : { »

cna : { »

affected : [ »

0 : { »

product : HHVM (string)

vendor : Facebook (string)

versions : [ »

0 : { »

lessThan : unspecified (string)

status : unaffected (string)

version : 4.98.1 (string)

versionType : custom (string)

}

1 : { »

status : affected (string)

version : 4.98.0 (string)

}

2 : { »

lessThan : unspecified (string)

status : unaffected (string)

version : 4.97.1 (string)

versionType : custom (string)

}

3 : { »

status : affected (string)

version : 4.97.0 (string)

}

4 : { »

lessThan : unspecified (string)

status : unaffected (string)

version : 4.96.1 (string)

versionType : custom (string)

}

5 : { »

status : affected (string)

version : 4.96.0 (string)

}

6 : { »

lessThan : unspecified (string)

status : unaffected (string)

version : 4.95.1 (string)

versionType : custom (string)

}

7 : { »

status : affected (string)

version : 4.95.0 (string)

}

8 : { »

lessThan : unspecified (string)

status : unaffected (string)

version : 4.94.1 (string)

versionType : custom (string)

}

9 : { »

status : affected (string)

version : 4.94.0 (string)

}

10 : { »

lessThan : unspecified (string)

status : unaffected (string)

version : 4.93.2 (string)

versionType : custom (string)

}

11 : { »

lessThan : unspecified (string)

status : affected (string)

version : 4.81.0 (string)

versionType : custom (string)

}

12 : { »

lessThan : unspecified (string)

status : unaffected (string)

version : 4.80.2 (string)

versionType : custom (string)

}

13 : { »

lessThan : unspecified (string)

status : affected (string)

version : 4.57.0 (string)

versionType : custom (string)

}

14 : { »

lessThan : unspecified (string)

status : unaffected (string)

version : 4.56.3 (string)

versionType : custom (string)

}

15 : { »

lessThan : 4.56.3 (string)

status : affected (string)

version : unspecified (string)

versionType : custom (string)

}

]

}

]

dateAssigned : 2021-01-27T00:00:00 (string)

descriptions : [ »

0 : { »

lang : en (string)

value : Due to incorrect string size calculations inside the preg_quote function, a large input string passed to the function can trigger an integer overflow leading to a heap overflow. This issue affects HHVM versions prior to 4.56.3, all versions between 4.57.0 and 4.80.1, all versions between 4.81.0 and 4.93.1, and versions 4.94.0, 4.95.0, 4.96.0, 4.97.0, 4.98.0. (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

cweId : CWE-122 (string)

description : Heap-based Buffer Overflow (CWE-122) (string)

lang : en (string)

type : CWE (string)

}

]

}

]

providerMetadata : { »

dateUpdated : 2021-03-10T15:50:30 (string)

orgId : 4fc57720-52fe-4431-a0fb-3d2c8747b827 (string)

shortName : facebook (string)

}

references : [ »

0 : { »

tags : [ »

0 : x_refsource_MISC (string)

]

url : https://hhvm.com/blog/2021/02/25/security-update.html (string)

}

1 : { »

tags : [ »

0 : x_refsource_MISC (string)

]

url : https://github.com/facebook/hhvm/commit/08193b7f0cd3910256e00d599f0f3eb2519c44ca (string)

}

]

x_legacyV4Record : { »

CVE_data_meta : { »

ASSIGNER : cve-assign@fb.com (string)

DATE_ASSIGNED : 2021-01-27 (string)

ID : CVE-2021-24025 (string)

STATE : PUBLIC (string)

}

affects : { »

vendor : { »

vendor_data : [ »

0 : { »

product : { »

product_data : [ »

0 : { »

product_name : HHVM (string)

version : { »

version_data : [ »

0 : { »

version_affected : !>= (string)

version_value : 4.98.1 (string)

}

1 : { »

version_affected : = (string)

version_value : 4.98.0 (string)

}

2 : { »

version_affected : !>= (string)

version_value : 4.97.1 (string)

}

3 : { »

version_affected : = (string)

version_value : 4.97.0 (string)

}

4 : { »

version_affected : !>= (string)

version_value : 4.96.1 (string)

}

5 : { »

version_affected : = (string)

version_value : 4.96.0 (string)

}

6 : { »

version_affected : !>= (string)

version_value : 4.95.1 (string)

}

7 : { »

version_affected : = (string)

version_value : 4.95.0 (string)

}

8 : { »

version_affected : !>= (string)

version_value : 4.94.1 (string)

}

9 : { »

version_affected : = (string)

version_value : 4.94.0 (string)

}

10 : { »

version_affected : !>= (string)

version_value : 4.93.2 (string)

}

11 : { »

version_affected : >= (string)

version_value : 4.81.0 (string)

}

12 : { »

version_affected : !>= (string)

version_value : 4.80.2 (string)

}

13 : { »

version_affected : >= (string)

version_value : 4.57.0 (string)

}

14 : { »

version_affected : !>= (string)

version_value : 4.56.3 (string)

}

15 : { »

version_affected : < (string)

version_value : 4.56.3 (string)

}

]

}

]

}

vendor_name : Facebook (string)

}

]

}

data_format : MITRE (string)

data_type : CVE (string)

data_version : 4.0 (string)

description : { »

description_data : [ »

0 : { »

lang : eng (string)

value : Due to incorrect string size calculations inside the preg_quote function, a large input string passed to the function can trigger an integer overflow leading to a heap overflow. This issue affects HHVM versions prior to 4.56.3, all versions between 4.57.0 and 4.80.1, all versions between 4.81.0 and 4.93.1, and versions 4.94.0, 4.95.0, 4.96.0, 4.97.0, 4.98.0. (string)

}

]

}

problemtype : { »

problemtype_data : [ »

0 : { »

description : [ »

0 : { »

lang : eng (string)

value : Heap-based Buffer Overflow (CWE-122) (string)

}

]

}

]

}

references : { »

reference_data : [ »

0 : { »

name : https://hhvm.com/blog/2021/02/25/security-update.html (string)

refsource : MISC (string)

url : https://hhvm.com/blog/2021/02/25/security-update.html (string)

}

1 : { »

name : https://github.com/facebook/hhvm/commit/08193b7f0cd3910256e00d599f0f3eb2519c44ca (string)

refsource : MISC (string)

url : https://github.com/facebook/hhvm/commit/08193b7f0cd3910256e00d599f0f3eb2519c44ca (string)

}

]

}

adp : [ »

0 : { »

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-03T19:14:10.116Z (string)

}

title : CVE Program Container (string)

references : [ »

0 : { »

tags : [ »

0 : x_refsource_MISC (string)

1 : x_transferred (string)

]

url : https://hhvm.com/blog/2021/02/25/security-update.html (string)

}

1 : { »

tags : [ »

0 : x_refsource_MISC (string)

1 : x_transferred (string)

]

url : https://github.com/facebook/hhvm/commit/08193b7f0cd3910256e00d599f0f3eb2519c44ca (string)

}

]

}

]

}

cveMetadata : { »

assignerOrgId : 4fc57720-52fe-4431-a0fb-3d2c8747b827 (string)

assignerShortName : facebook (string)

cveId : CVE-2021-24025 (string)

datePublished : 2021-03-10T15:50:30 (string)

dateReserved : 2021-01-13T00:00:00 (string)

dateUpdated : 2024-08-03T19:14:10.116Z (string)

state : PUBLISHED (string)

}

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:facebook:hhvm:*:*:*:*:*:*:*:*", "matchCriteriaId": "069C0B7D-5233-4EFF-BBA7-8B84D9227044", "versionEndExcluding": "4.56.3", "vulnerable": true}, {"criteria": "cpe:2.3:a:facebook:hhvm:*:*:*:*:*:*:*:*", "matchCriteriaId": "F5E6E1A7-225A-4C45-9E2D-5ED55BA3AEA3", "versionEndIncluding": "4.80.1", "versionStartIncluding": "4.57.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:facebook:hhvm:*:*:*:*:*:*:*:*", "matchCriteriaId": "9470E6A8-E2CB-4C72-8FEF-5CFF04E7E3C3", "versionEndIncluding": "4.93.1", "versionStartIncluding": "4.81.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:facebook:hhvm:4.94.0:*:*:*:*:*:*:*", "matchCriteriaId": "1C4B9A3C-6A5A-45C4-A490-C13CF6D6A867", "vulnerable": true}, {"criteria": "cpe:2.3:a:facebook:hhvm:4.95.0:*:*:*:*:*:*:*", "matchCriteriaId": "18D33DC0-E6A7-4DC6-8E9A-2B85842EC21B", "vulnerable": true}, {"criteria": "cpe:2.3:a:facebook:hhvm:4.96.0:*:*:*:*:*:*:*", "matchCriteriaId": "B0B9078D-3C25-45B2-B5F2-59585A47BACB", "vulnerable": true}, {"criteria": "cpe:2.3:a:facebook:hhvm:4.97.0:*:*:*:*:*:*:*", "matchCriteriaId": "7B8F5C11-8610-4099-8A45-E6241F3D24E0", "vulnerable": true}, {"criteria": "cpe:2.3:a:facebook:hhvm:4.98.0:*:*:*:*:*:*:*", "matchCriteriaId": "47FF13C3-19DC-4F53-BF9D-38AC89D647D5", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "Due to incorrect string size calculations inside the preg_quote function, a large input string passed to the function can trigger an integer overflow leading to a heap overflow. This issue affects HHVM versions prior to 4.56.3, all versions between 4.57.0 and 4.80.1, all versions between 4.81.0 and 4.93.1, and versions 4.94.0, 4.95.0, 4.96.0, 4.97.0, 4.98.0."}, {"lang": "es", "value": "Debido a c\u00e1lculos de tama\u00f1o de cadena incorrectos dentro de la funci\u00f3n preg_quote, una cadena de entrada grande pasada a la funci\u00f3n puede desencadenar un desbordamiento de enteros que conlleva a un desbordamiento de la pila.&#xa0;Este problema afecta a versiones de HHVM anteriores a 4.56.3, todas las versiones entre 4.57.0 y 4.80.1, todas las versiones entre 4.81.0 y 4.93.1 y versiones 4.94.0, 4.95.0, 4.96.0, 4.97.0 , 4.98.0"}], "id": "CVE-2021-24025", "lastModified": "2024-11-21T05:52:14.053", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2021-03-10T16:15:16.750", "references": [{"source": "cve-assign@fb.com", "tags": ["Patch", "Third Party Advisory"], "url": "https://github.com/facebook/hhvm/commit/08193b7f0cd3910256e00d599f0f3eb2519c44ca"}, {"source": "cve-assign@fb.com", "tags": ["Release Notes", "Third Party Advisory"], "url": "https://hhvm.com/blog/2021/02/25/security-update.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Third Party Advisory"], "url": "https://github.com/facebook/hhvm/commit/08193b7f0cd3910256e00d599f0f3eb2519c44ca"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Release Notes", "Third Party Advisory"], "url": "https://hhvm.com/blog/2021/02/25/security-update.html"}], "sourceIdentifier": "cve-assign@fb.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-122"}], "source": "cve-assign@fb.com", "type": "Secondary"}, {"description": [{"lang": "en", "value": "CWE-190"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:a:facebook:hhvm:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 069C0B7D-5233-4EFF-BBA7-8B84D9227044 (string)

versionEndExcluding : 4.56.3 (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:a:facebook:hhvm:*:*:*:*:*:*:*:* (string)

matchCriteriaId : F5E6E1A7-225A-4C45-9E2D-5ED55BA3AEA3 (string)

versionEndIncluding : 4.80.1 (string)

versionStartIncluding : 4.57.0 (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:a:facebook:hhvm:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 9470E6A8-E2CB-4C72-8FEF-5CFF04E7E3C3 (string)

versionEndIncluding : 4.93.1 (string)

versionStartIncluding : 4.81.0 (string)

vulnerable : true (boolean)

}

3 : { »

criteria : cpe:2.3:a:facebook:hhvm:4.94.0:*:*:*:*:*:*:* (string)

matchCriteriaId : 1C4B9A3C-6A5A-45C4-A490-C13CF6D6A867 (string)

vulnerable : true (boolean)

}

4 : { »

criteria : cpe:2.3:a:facebook:hhvm:4.95.0:*:*:*:*:*:*:* (string)

matchCriteriaId : 18D33DC0-E6A7-4DC6-8E9A-2B85842EC21B (string)

vulnerable : true (boolean)

}

5 : { »

criteria : cpe:2.3:a:facebook:hhvm:4.96.0:*:*:*:*:*:*:* (string)

matchCriteriaId : B0B9078D-3C25-45B2-B5F2-59585A47BACB (string)

vulnerable : true (boolean)

}

6 : { »

criteria : cpe:2.3:a:facebook:hhvm:4.97.0:*:*:*:*:*:*:* (string)

matchCriteriaId : 7B8F5C11-8610-4099-8A45-E6241F3D24E0 (string)

vulnerable : true (boolean)

}

7 : { »

criteria : cpe:2.3:a:facebook:hhvm:4.98.0:*:*:*:*:*:*:* (string)

matchCriteriaId : 47FF13C3-19DC-4F53-BF9D-38AC89D647D5 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : Due to incorrect string size calculations inside the preg_quote function, a large input string passed to the function can trigger an integer overflow leading to a heap overflow. This issue affects HHVM versions prior to 4.56.3, all versions between 4.57.0 and 4.80.1, all versions between 4.81.0 and 4.93.1, and versions 4.94.0, 4.95.0, 4.96.0, 4.97.0, 4.98.0. (string)

}

1 : { »

lang : es (string)

value : Debido a cálculos de tamaño de cadena incorrectos dentro de la función preg_quote, una cadena de entrada grande pasada a la función puede desencadenar un desbordamiento de enteros que conlleva a un desbordamiento de la pila. Este problema afecta a versiones de HHVM anteriores a 4.56.3, todas las versiones entre 4.57.0 y 4.80.1, todas las versiones entre 4.81.0 y 4.93.1 y versiones 4.94.0, 4.95.0, 4.96.0, 4.97.0 , 4.98.0 (string)

}

]

id : CVE-2021-24025 (string)

lastModified : 2024-11-21T05:52:14.053 (string)

metrics : { »

cvssMetricV2 : [ »

0 : { »

acInsufInfo : false (boolean)

baseSeverity : HIGH (string)

cvssData : { »

accessComplexity : LOW (string)

accessVector : NETWORK (string)

authentication : NONE (string)

availabilityImpact : PARTIAL (string)

baseScore : 7.5 (number)

confidentialityImpact : PARTIAL (string)

integrityImpact : PARTIAL (string)

vectorString : AV:N/AC:L/Au:N/C:P/I:P/A:P (string)

version : 2.0 (string)

}

exploitabilityScore : 10 (number)

impactScore : 6.4 (number)

obtainAllPrivilege : false (boolean)

obtainOtherPrivilege : false (boolean)

obtainUserPrivilege : false (boolean)

source : nvd@nist.gov (string)

type : Primary (string)

userInteractionRequired : false (boolean)

}

]

cvssMetricV31 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : HIGH (string)

baseScore : 9.8 (number)

baseSeverity : CRITICAL (string)

confidentialityImpact : HIGH (string)

integrityImpact : HIGH (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H (string)

version : 3.1 (string)

}

exploitabilityScore : 3.9 (number)

impactScore : 5.9 (number)

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

published : 2021-03-10T16:15:16.750 (string)

references : [ »

0 : { »

source : cve-assign@fb.com (string)

tags : [ »

0 : Patch (string)

1 : Third Party Advisory (string)

]

url : https://github.com/facebook/hhvm/commit/08193b7f0cd3910256e00d599f0f3eb2519c44ca (string)

}

1 : { »

source : cve-assign@fb.com (string)

tags : [ »

0 : Release Notes (string)

1 : Third Party Advisory (string)

]

url : https://hhvm.com/blog/2021/02/25/security-update.html (string)

}

2 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Patch (string)

1 : Third Party Advisory (string)

]

url : https://github.com/facebook/hhvm/commit/08193b7f0cd3910256e00d599f0f3eb2519c44ca (string)

}

3 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Release Notes (string)

1 : Third Party Advisory (string)

]

url : https://hhvm.com/blog/2021/02/25/security-update.html (string)

}

]

sourceIdentifier : cve-assign@fb.com (string)

vulnStatus : Modified (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-122 (string)

}

]

source : cve-assign@fb.com (string)

type : Secondary (string)

}

1 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-190 (string)

}

]

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact Partial

Integrity Impact Partial

Availability Impact Partial

Affected Vendors & Products

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact Partial

Integrity Impact Partial

Availability Impact Partial

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object