PT-2021-10300 · Facebook · Hhvm

Jjergus · Published 2021-03-10 · Updated 2021-03-17 · CVE-2020-1916

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: HHVM versions prior to 4.56.2 HHVM versions 4.57.0 through 4.78.0 HHVM version 4.79.0 HHVM version 4.80.0 HHVM version 4.81.0 HHVM version 4.82.0 HHVM version 4.83.0

Description: An incorrect size calculation in ldap escape may lead to an integer overflow when overly long input is passed in, resulting in an out-of-bounds write.

Recommendations: For HHVM versions prior to 4.56.2, update to version 4.56.2 or later. For HHVM versions 4.57.0 through 4.78.0, update to a version outside of this range. For HHVM version 4.79.0, update to a newer version. For HHVM version 4.80.0, update to a newer version. For HHVM version 4.81.0, update to a newer version. For HHVM version 4.82.0, update to a newer version. For HHVM version 4.83.0, update to a newer version. As a temporary workaround, consider restricting the input length to prevent overly long input from being passed to the ldap escape function.

Fix

Heap Based Buffer Overflow

Memory Corruption

Weakness Enumeration

CWE-122

CWE-787

Related Identifiers

CVE-2020-1916

Affected Products

Hhvm

References · 9

• https://github.com/facebook/hhvm/commit/abe0b29e4d3a610f9bc920b8be4ad8403364c2d4 · Patch
• https://ubuntu.com/security/CVE-2020-1916 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2020-1916 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-1916 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2020-1916 · Security Note
• https://hhvm.com/blog/2020/11/12/security-update.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-1916 · Security Note
• https://t.me/cibsecurity/24692 · Telegram Post
• https://t.me/cvenotify/11093 · Telegram Post