CVE-2021-24025

🗓️ 10 Mar 2021 15:50:30Reported by facebookType

Due to incorrect string size calculations, a large input string can trigger an integer overflow in HHVM versions

Reporter	Title	Published	Views	Family All 9
CNNVD	Katy Voor HHVM 输入验证错误漏洞	10 Mar 202100:00	–	cnnvd
CVE	CVE-2021-24025	10 Mar 202115:50	–	cve
EUVD	EUVD-2021-10945	7 Oct 202500:30	–	euvd
NVD	CVE-2021-24025	10 Mar 202116:15	–	nvd
OSV	UBUNTU-CVE-2021-24025	10 Mar 202116:15	–	osv
Prion	Integer overflow	10 Mar 202116:15	–	prion
RedhatCVE	CVE-2021-24025	22 May 202519:19	–	redhatcve
UbuntuCve	CVE-2021-24025	10 Mar 202116:15	–	ubuntucve
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2021-24025	10 Sep 202500:00	–	nessus

[
  {
    "product": "HHVM",
    "vendor": "Facebook",
    "versions": [
      {
        "lessThan": "unspecified",
        "status": "unaffected",
        "version": "4.98.1",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "4.98.0"
      },
      {
        "lessThan": "unspecified",
        "status": "unaffected",
        "version": "4.97.1",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "4.97.0"
      },
      {
        "lessThan": "unspecified",
        "status": "unaffected",
        "version": "4.96.1",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "4.96.0"
      },
      {
        "lessThan": "unspecified",
        "status": "unaffected",
        "version": "4.95.1",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "4.95.0"
      },
      {
        "lessThan": "unspecified",
        "status": "unaffected",
        "version": "4.94.1",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "4.94.0"
      },
      {
        "lessThan": "unspecified",
        "status": "unaffected",
        "version": "4.93.2",
        "versionType": "custom"
      },
      {
        "lessThan": "unspecified",
        "status": "affected",
        "version": "4.81.0",
        "versionType": "custom"
      },
      {
        "lessThan": "unspecified",
        "status": "unaffected",
        "version": "4.80.2",
        "versionType": "custom"
      },
      {
        "lessThan": "unspecified",
        "status": "affected",
        "version": "4.57.0",
        "versionType": "custom"
      },
      {
        "lessThan": "unspecified",
        "status": "unaffected",
        "version": "4.56.3",
        "versionType": "custom"
      },
      {
        "lessThan": "4.56.3",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
github	www.github.com/facebook/hhvm/commit/08193b7f0cd3910256e00d599f0f3eb2519c44ca
hhvm	www.hhvm.com/blog/2021/02/25/security-update.html

10 Mar 2021 15:50Current

9.8High risk

Vulners AI Score9.8

EPSS0.01659

CWE-122