PT-2018-17488 · Facebook · Hhvm

Name of the Vulnerable Software and Affected Versions: HHVM versions 3.30 and 3.27.4 and earlier Description: The issue allows for an out-of-bounds read using the Memcache::getextendedstats function. To exploit this, an attacker would need control over memcached server hostnames and/or ports...