CVE-2020-1916

2021-03-1015:50:27

CWE-122

facebook

www.cve.org

ldap_escape

integer overflow

out-of-bounds write

hhvm

security vulnerability

cve-2020-1916

AI Score

9.7

Confidence

High

EPSS

0.002

Percentile

64.7%

JSON

An incorrect size calculation in ldap_escape may lead to an integer overflow when overly long input is passed in, resulting in an out-of-bounds write. This issue affects HHVM prior to 4.56.2, all versions between 4.57.0 and 4.78.0, 4.79.0, 4.80.0, 4.81.0, 4.82.0, 4.83.0.

CNA Affected

[
  {
    "product": "HHVM",
    "vendor": "Facebook",
    "versions": [
      {
        "lessThan": "unspecified",
        "status": "unaffected",
        "version": "4.83.1",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "4.83.0"
      },
      {
        "lessThan": "unspecified",
        "status": "unaffected",
        "version": "4.82.1",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "4.82.0"
      },
      {
        "lessThan": "unspecified",
        "status": "unaffected",
        "version": "4.81.1",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "4.81.0"
      },
      {
        "lessThan": "unspecified",
        "status": "unaffected",
        "version": "4.80.1",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "4.80.0"
      },
      {
        "lessThan": "unspecified",
        "status": "unaffected",
        "version": "4.79.1",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "4.79.0"
      },
      {
        "lessThan": "unspecified",
        "status": "unaffected",
        "version": "4.78.1",
        "versionType": "custom"
      },
      {
        "lessThan": "unspecified",
        "status": "affected",
        "version": "4.57.0",
        "versionType": "custom"
      },
      {
        "lessThan": "unspecified",
        "status": "unaffected",
        "version": "4.56.2",
        "versionType": "custom"
      },
      {
        "lessThan": "4.56.2",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]