PT-2014-7102

Name of the Vulnerable Software and Affected Versions HHVM versions prior to 3.3.0 Description The issue allows remote attackers to obtain sensitive information by leveraging read access beyond the end of a certain key string. This is due to the HashContext class in hphp/runtime/ext/ext hash.cpp...

CVE-2008-0227: Improper Restriction of Operations within the Bounds of a Memory Buffer

yaSSL 1.7.5 and earlier, as used in MySQL and possibly other products, allows remote attackers to cause a denial of service crash via a Hello packet containing a large size value, which triggers a buffer over-read in the HASHwithTransform::Update function in hash.cpp...