Published: 10/03/2021 Updated: 15/03/2021

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9

VMScore: 446

Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

In the crypt function, we attempt to null terminate a buffer using the size of the input salt without validating that the offset is within the buffer. This issue affects HHVM versions before 4.56.3, all versions between 4.57.0 and 4.80.1, all versions between 4.81.0 and 4.93.1, and versions 4.94.0, 4.95.0, 4.96.0, 4.97.0, 4.98.0.

Vulnerable Product	Search on Vulmon	Subscribe to Product
facebook hhvm
facebook hhvm 4.94.0
facebook hhvm 4.95.0
facebook hhvm 4.96.0
facebook hhvm 4.97.0
facebook hhvm 4.98.0

CYBERSEC - A Cybersecurity Discord Bot

CYBERSEC DISCORD BOT An easy to use cybersecurity discord bot that attempts to make the life easier for individuals, teams and groups interested in researching, sharing, learning, or even playing some CTFs DESCRIPTION This bot makes use of several APIs and google dorks to search for the intended content Features: Encode and decode text to or from base64 and URL Search for

CYBERSEC - A Cybersecurity Discord Bot

CYBERSEC DISCORD BOT An easy to use cybersecurity discord bot that attempts to make the life easier for individuals, teams and groups interested in researching, sharing, learning, or even playing some CTFs DESCRIPTION This bot makes use of several APIs and google dorks to search for the intended content Features: Encode and decode text to or from base64 and URL Search for

CWE-787 https://github.com/facebook/hhvm/commit/08193b7f0cd3910256e00d599f0f3eb2519c44ca https://hhvm.com/blog/2021/02/25/security-update.html https://nvd.nist.gov https://github.com/fssecur3/cybersec

CVE-2020-1921

Vulnerability Summary

Vulnerability Trend

Github Repositories

References

Vulmon Search

About

Products

Connect