CVE-2016-6871

CVE-2016-6871: Integer overflow in Bcmath within Facebook HHVM before 3.15.0 can trigger a buffer overflow via unknown vectors, with unspecified impact. Affected product: Facebook HHVM (HipHop VM). Practical impact is described as overflow-related, but the exact exploit scenarios are not detailed...

CVE-2016-6873

Self recursion in compact in Facebook HHVM before 3.15.0 allows attackers to have unspecified impact via unknown vectors...

CVE-2016-6870

Out-of-bounds write in the 1 mbdetectencoding, 2 mbsendmail, and 3 mbdetectorder functions in Facebook HHVM before 3.15.0 allows attackers to have unspecified impact via unknown vectors...

CVE-2016-6872

Integer overflow in StringUtil::implode in Facebook HHVM before 3.15.0 allows attackers to have unspecified impact via unknown vectors...

CVE-2016-6873

CVE-2016-6873 affects Facebook HHVM before 3.15.0. The vulnerability is caused by self recursion in the compact function, leading to unspecified impact via unknown vectors. Public records (NVD/NSS OSV) describe a high-severity, network-exploitable issue with potential partial confidentiality/inte...

CVE-2016-6875

Infinite recursion in wddx in Facebook HHVM before 3.15.0 allows attackers to have unspecified impact via unknown vectors...

PT-2017-9036

Name of the Vulnerable Software and Affected Versions HHVM versions prior to 3.15.0 Description The issue is related to an integer overflow in the bcmath component, which can trigger a buffer overflow. This allows attackers to have an unspecified impact via unknown vectors. Recommendations For...

CVE-2016-6871: Integer Overflow or Wraparound

Integer overflow in bcmath in Facebook HHVM before 3.15.0 allows attackers to have unspecified impact via unknown vectors, which triggers a buffer overflow...

CVE-2016-6873: Undefined Security Weakness

Self recursion in compact in Facebook HHVM before 3.15.0 allows attackers to have unspecified impact via unknown vectors...

PT-2017-9038

Name of the Vulnerable Software and Affected Versions Facebook HHVM versions prior to 3.15.0 Description The issue is related to self recursion in compact, allowing attackers to have an unspecified impact. The exact vectors used for the attack are unknown. Recommendations For Facebook HHVM versio...

CVE-2016-6875: Undefined Security Weakness

Infinite recursion in wddx in Facebook HHVM before 3.15.0 allows attackers to have unspecified impact via unknown vectors...

PT-2017-9040

Name of the Vulnerable Software and Affected Versions HHVM versions prior to 3.15.0 Description The issue is related to infinite recursion in wddx, allowing attackers to have an unspecified impact. The exact vectors used for the attack are unknown. Recommendations For versions prior to 3.15.0,...

PT-2017-9039

Name of the Vulnerable Software and Affected Versions HHVM versions prior to 3.15.0 Description The issue is related to the array recursive functions in HHVM, which allows attackers to have an unspecified impact. The attack vector is unknown and is related to recursion. Recommendations For versio...

CVE-2016-6872: Integer Overflow or Wraparound

Integer overflow in StringUtil::implode in Facebook HHVM before 3.15.0 allows attackers to have unspecified impact via unknown vectors...

CVE-2016-6874: Undefined Security Weakness

The arrayrecursive functions in Facebook HHVM before 3.15.0 allows attackers to have unspecified impact via unknown vectors, related to recursion...

PT-2017-9037

Name of the Vulnerable Software and Affected Versions HHVM versions prior to 3.15.0 Description The issue is related to an integer overflow in the StringUtil::implode function. This allows attackers to have an unspecified impact via unknown vectors. Recommendations For versions prior to 3.15.0,...

CVE-2016-6870: Out-of-bounds Write

Out-of-bounds write in the 1 mbdetectencoding, 2 mbsendmail, and 3 mbdetectorder functions in Facebook HHVM before 3.15.0 allows attackers to have unspecified impact via unknown vectors...

PT-2017-9035

Name of the Vulnerable Software and Affected Versions HHVM versions prior to 3.15.0 Description The issue is related to out-of-bounds write in certain functions, specifically mb detect encoding, mb send mail, and mb detect order, which can allow attackers to have an unspecified impact. The exact...

SOL07112184 - HHVM vulnerability CVE-2016-1000109

Vulnerability Recommended Actions None Supplemental Information SOL9970: Subscribing to email notifications regarding F5 products SOL9957: Creating a custom RSS feed to view new and updated documents SOL4602: Overview of the F5 security vulnerability response policy SOL4918: Overview of the F5...

Facebook HHVM suffers from httpoxy remote proxy infection vulnerability

HHWM HipHop VM is a virtual machine launched by Facebook to execute PHP code. httpoxy is a set of vulnerabilities that affect application code running in a CGI environment. The vulnerabilities exist primarily in multiple web servers, web frameworks, and programming languages. The Proxy field name...