CVE-2021-24036

CVE-2021-24036 affects folly and HHVM: a vulnerability in IOBuf handling where passing an attacker-controlled size can trigger an integer overflow, causing an out-of-bounds heap write and potential remote code execution. Affected are folly versions prior to 2021.07.22.00 and HHVM versions prior t...

CVE-2021-24036

Passing an attacker controlled size when creating an IOBuf could cause integer overflow, leading to an out of bounds write on the heap with the possibility of remote code execution. This issue affects versions of folly prior to v2021.07.22.00. This issue affects HHVM versions prior to 4.80.5, all...

PT-2021-15658 · Facebook · Folly +1

Name of the Vulnerable Software and Affected Versions: folly versions prior to v2021.07.22.00 HHVM versions prior to 4.80.5 HHVM versions 4.81.0 through 4.102.1 HHVM versions 4.103.0 through 4.113.0 HHVM versions 4.114.0 through 4.118.1 Description: Passing an attacker-controlled size when creati...

Denial Of Service (DoS)

Folly is vulnerable to denial of service DoS attack. It is possible because it causes an out-of-bounds read in AsyncSSLSocket due to mishandling of closenotify alerts...

CVE-2019-11934

Improper handling of closenotify alerts can result in an out-of-bounds read in AsyncSSLSocket. This issue affects folly prior to v2019.11.04.00...

CVE-2019-11934

Improper handling of closenotify alerts can result in an out-of-bounds read in AsyncSSLSocket. This issue affects folly prior to v2019.11.04.00...

Default credentials

Improper handling of closenotify alerts can result in an out-of-bounds read in AsyncSSLSocket. This issue affects folly prior to v2019.11.04.00...

CVE-2019-11934

Improper handling of closenotify alerts can result in an out-of-bounds read in AsyncSSLSocket. This issue affects folly prior to v2019.11.04.00...

CVE-2019-11934

The CVE concerns the Folly library’s AsyncSSLSocket. The issue is an improper handling of close_notify alerts that can cause an out-of-bounds read, affecting Folly prior to v2019.11.04.00. Reported as a Denial of Service risk due to the out-of-bounds read, with Red Hat/Veracode descriptions align...

CVE-2018-6337

folly::secureRandom will re-use a buffer between parent and child processes when fork is called. That will result in multiple forked children producing repeat or similar results. This affects HHVM 3.26 prior to 3.26.3 and the folly library between v2017.12.11.00 and v2018.08.09.00...

Design/Logic Flaw

folly::secureRandom will re-use a buffer between parent and child processes when fork is called. That will result in multiple forked children producing repeat or similar results. This affects HHVM 3.26 prior to 3.26.3 and the folly library between v2017.12.11.00 and v2018.08.09.00...

CVE-2018-6337

folly::secureRandom will re-use a buffer between parent and child processes when fork is called. That will result in multiple forked children producing repeat or similar results. This affects HHVM 3.26 prior to 3.26.3 and the folly library between v2017.12.11.00 and v2018.08.09.00...

CVE-2018-6337

folly::secureRandom will re-use a buffer between parent and child processes when fork is called. That will result in multiple forked children producing repeat or similar results. This affects HHVM 3.26 prior to 3.26.3 and the folly library between v2017.12.11.00 and v2018.08.09.00...

CVE-2018-6337

folly::secureRandom will re-use a buffer between parent and child processes when fork is called. That will result in multiple forked children producing repeat or similar results. This affects HHVM 3.26 prior to 3.26.3 and the folly library between v2017.12.11.00 and v2018.08.09.00...

CVE-2018-6337

The CVE-2018-6337 issue affects HHVM and the folly library, caused by folly::secureRandom re-using a buffer between parent and child processes after fork(). This can lead to repeated or correlated random outcomes across multiple forked children. Affected products/versions: HHVM prior to 3.26.3; f...

PT-2018-17487 · Facebook · Folly +1

Name of the Vulnerable Software and Affected Versions: HHVM versions prior to 3.26.3 folly library versions between v2017.12.11.00 and v2018.08.09.00 Description: The issue is related to the folly::secureRandom function, which re-uses a buffer between parent and child processes when fork is calle...