CVE-2016-6872

CVE-2016-6872 involves an integer overflow in StringUtil::implode in Facebook HHVM prior to 3.15.0. The vulnerability has a high/severe impact profile (CVSS v3.0: CRITICAL, 9.8; v2.0: HIGH, 7.5) with network attack vector and no authentication required. The reports state that the overflow could e...

CVE-2016-6871

Integer overflow in bcmath in Facebook HHVM before 3.15.0 allows attackers to have unspecified impact via unknown vectors, which triggers a buffer overflow...

CVE-2016-6871

CVE-2016-6871: Integer overflow in Bcmath within Facebook HHVM before 3.15.0 can trigger a buffer overflow via unknown vectors, with unspecified impact. Affected product: Facebook HHVM (HipHop VM). Practical impact is described as overflow-related, but the exact exploit scenarios are not detailed...

CVE-2016-6875

CVE-2016-6875 corresponds to an infinite recursion in WDDX handling in Facebook HHVM prior to 3.15.0. The vulnerability statement notes an unspecified impact via unknown vectors. The linked metrics assign a high base score (CVSSv2: 7.5; CVSSv3: 9.8) with network access and low attack complexity, ...

CVE-2016-6875

Infinite recursion in wddx in Facebook HHVM before 3.15.0 allows attackers to have unspecified impact via unknown vectors...

CVE-2016-6875

Infinite recursion in wddx in Facebook HHVM before 3.15.0 allows attackers to have unspecified impact via unknown vectors...

CVE-2016-6873: Undefined Security Weakness

Self recursion in compact in Facebook HHVM before 3.15.0 allows attackers to have unspecified impact via unknown vectors...

CVE-2016-6874: Undefined Security Weakness

The arrayrecursive functions in Facebook HHVM before 3.15.0 allows attackers to have unspecified impact via unknown vectors, related to recursion...

CVE-2016-6872: Integer Overflow or Wraparound

Integer overflow in StringUtil::implode in Facebook HHVM before 3.15.0 allows attackers to have unspecified impact via unknown vectors...

CVE-2016-6870: Out-of-bounds Write

Out-of-bounds write in the 1 mbdetectencoding, 2 mbsendmail, and 3 mbdetectorder functions in Facebook HHVM before 3.15.0 allows attackers to have unspecified impact via unknown vectors...

CVE-2016-6871: Integer Overflow or Wraparound

Integer overflow in bcmath in Facebook HHVM before 3.15.0 allows attackers to have unspecified impact via unknown vectors, which triggers a buffer overflow...

PT-2017-9036

Name of the Vulnerable Software and Affected Versions HHVM versions prior to 3.15.0 Description The issue is related to an integer overflow in the bcmath component, which can trigger a buffer overflow. This allows attackers to have an unspecified impact via unknown vectors. Recommendations For...

PT-2017-9039

Name of the Vulnerable Software and Affected Versions HHVM versions prior to 3.15.0 Description The issue is related to the array recursive functions in HHVM, which allows attackers to have an unspecified impact. The attack vector is unknown and is related to recursion. Recommendations For versio...

PT-2017-9035

Name of the Vulnerable Software and Affected Versions HHVM versions prior to 3.15.0 Description The issue is related to out-of-bounds write in certain functions, specifically mb detect encoding, mb send mail, and mb detect order, which can allow attackers to have an unspecified impact. The exact...

PT-2017-9038

Name of the Vulnerable Software and Affected Versions Facebook HHVM versions prior to 3.15.0 Description The issue is related to self recursion in compact, allowing attackers to have an unspecified impact. The exact vectors used for the attack are unknown. Recommendations For Facebook HHVM versio...

CVE-2016-6875: Undefined Security Weakness

Infinite recursion in wddx in Facebook HHVM before 3.15.0 allows attackers to have unspecified impact via unknown vectors...

PT-2017-9037

Name of the Vulnerable Software and Affected Versions HHVM versions prior to 3.15.0 Description The issue is related to an integer overflow in the StringUtil::implode function. This allows attackers to have an unspecified impact via unknown vectors. Recommendations For versions prior to 3.15.0,...

PT-2017-9040

Name of the Vulnerable Software and Affected Versions HHVM versions prior to 3.15.0 Description The issue is related to infinite recursion in wddx, allowing attackers to have an unspecified impact. The exact vectors used for the attack are unknown. Recommendations For versions prior to 3.15.0,...

SOL07112184 - HHVM vulnerability CVE-2016-1000109

Vulnerability Recommended Actions None Supplemental Information SOL9970: Subscribing to email notifications regarding F5 products SOL9957: Creating a custom RSS feed to view new and updated documents SOL4602: Overview of the F5 security vulnerability response policy SOL4918: Overview of the F5...

Facebook HHVM suffers from httpoxy remote proxy infection vulnerability

HHWM HipHop VM is a virtual machine launched by Facebook to execute PHP code. httpoxy is a set of vulnerabilities that affect application code running in a CGI environment. The vulnerabilities exist primarily in multiple web servers, web frameworks, and programming languages. The Proxy field name...