Lucene search

[email protected]CVE-2020-1899

HistoryMar 11, 2021 - 1:15 a.m.

CVE-2020-1899

2021-03-1101:15:14

CWE-822

CWE-119

[email protected]

web.nvd.nist.gov

185

cve-2020-1899

unserialize function

type code

memory access

hhvm

nvd

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

0.002 Low

EPSS

Percentile

55.2%

JSON

The unserialize() function supported a type code, “S”, which was meant to be supported only for APC serialization. This type code allowed arbitrary memory addresses to be accessed as if they were static StringData objects. This issue affected HHVM prior to v4.32.3, between versions 4.33.0 and 4.56.0, 4.57.0, 4.58.0, 4.58.1, 4.59.0, 4.60.0, 4.61.0, 4.62.0.

Affected configurations

NVD

Node

facebookhhvmRange<4.32.3

facebookhhvmRange4.33.0–4.56.1

facebookhhvmMatch4.57.0

facebookhhvmMatch4.58.0

facebookhhvmMatch4.58.1

facebookhhvmMatch4.59.0

facebookhhvmMatch4.60.0

facebookhhvmMatch4.61.0

facebookhhvmMatch4.62.0

CPENameOperatorVersion
facebook:hhvmfacebook hhvmlt4.32.3
facebook:hhvmfacebook hhvmlt4.56.1
facebook:hhvmfacebook hhvmeq4.57.0
facebook:hhvmfacebook hhvmeq4.58.0
facebook:hhvmfacebook hhvmeq4.58.1
facebook:hhvmfacebook hhvmeq4.59.0
facebook:hhvmfacebook hhvmeq4.60.0
facebook:hhvmfacebook hhvmeq4.61.0
facebook:hhvmfacebook hhvmeq4.62.0

CPE	Name	Operator	Version
facebook:hhvm	facebook hhvm	lt	4.32.3
facebook:hhvm	facebook hhvm	lt	4.56.1
facebook:hhvm	facebook hhvm	eq	4.57.0
facebook:hhvm	facebook hhvm	eq	4.58.0
facebook:hhvm	facebook hhvm	eq	4.58.1
facebook:hhvm	facebook hhvm	eq	4.59.0
facebook:hhvm	facebook hhvm	eq	4.60.0
facebook:hhvm	facebook hhvm	eq	4.61.0
facebook:hhvm	facebook hhvm	eq	4.62.0

CNA Affected

[
  {
    "product": "HHVM",
    "vendor": "Facebook",
    "versions": [
      {
        "lessThan": "unspecified",
        "status": "unaffected",
        "version": "4.62.1",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "4.62.0"
      },
      {
        "lessThan": "unspecified",
        "status": "unaffected",
        "version": "4.61.1",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "4.61.0"
      },
      {
        "lessThan": "unspecified",
        "status": "unaffected",
        "version": "4.60.1",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "4.60.0"
      },
      {
        "lessThan": "unspecified",
        "status": "unaffected",
        "version": "4.59.1",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "4.59.0"
      },
      {
        "lessThan": "unspecified",
        "status": "unaffected",
        "version": "4.58.2",
        "versionType": "custom"
      },
      {
        "lessThan": "unspecified",
        "status": "affected",
        "version": "4.58.0",
        "versionType": "custom"
      },
      {
        "lessThan": "unspecified",
        "status": "unaffected",
        "version": "4.57.1",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "4.57.0"
      },
      {
        "lessThan": "unspecified",
        "status": "unaffected",
        "version": "4.56.1",
        "versionType": "custom"
      },
      {
        "lessThan": "unspecified",
        "status": "affected",
        "version": "4.33.0",
        "versionType": "custom"
      },
      {
        "lessThan": "unspecified",
        "status": "unaffected",
        "version": "4.32.3",
        "versionType": "custom"
      },
      {
        "lessThan": "4.32.3",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

References

github.com/facebook/hhvm/commit/1107228a5128d3ca1c4add8ac1635d933cbbe2e9

hhvm.com/blog/2020/06/30/security-update.html

Social References

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

0.002 Low

EPSS

Percentile

55.2%

JSON

Related for CVE-2020-1899

ubuntucve1 nvd1 cvelist1 osv1 prion1