Lucene search
HistoryDec 28, 2014 - 3:59 p.m.
CVE-2014-2208
cve-2014-2208
crlf injection
vulnerability
hphp
util
light-process
cpp
facebook
hhvm
remote attackers
execute
arbitrary commands
security
nvd
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8 High
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
54.3%
CRLF injection vulnerability in the LightProcess protocol implementation in hphp/util/light-process.cpp in Facebook HipHop Virtual Machine (HHVM) before 2.4.2 allows remote attackers to execute arbitrary commands by entering a \n (newline) character before the end of a string.
Affected configurations
Node
facebookhiphop_virtual_machineRange≤2.4.1
| CPE | Name | Operator | Version |
|---|---|---|---|
| facebook:hiphop_virtual_machine | facebook hiphop virtual machine | le | 2.4.1 |
Related
nvd
nvd
CVE-2014-2208
2014-12-28 15:59:00
prion
prion
Crlf injection
2014-12-28 15:59:00
cvelist
cvelist
CVE-2014-2208
2014-12-28 15:00:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8 High
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
54.3%
Related for CVE-2014-2208