Description (CNA)
The Memcache::getextendedstats function can be used to trigger an out-of-bounds read. Exploiting this issue requires control over memcached server hostnames and/or ports. This affects all supported versions of HHVM (3.30 and 3.27.4 and below).
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Facebook / HHVM | affected 3.30.1; affected 3.30.0 before unspecified; affected 3.27.5; affected unspecified before 3.27.5 |
CWE
CWE-125
References
- https://hhvm.com/blog/2018/12/18/hhvm-3.30.1.html
- https://github.com/facebook/hhvm/commit/4bff3bfbe90d10451e4638c2118d1ad1117bb3e3
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.