hhvm vulnerabilities (Ubuntu)
47 vulnerabilities.
-
hhvmUbuntu HHVM 4.172.0 and all prior versions use TLS 1.0 for secure connections when handling tls:// URLs... 9.8 Critical -
hhvmUbuntu HHVM supports the use of an "admin" server which accepts administrative requests over HTTP. One... 8.1 High -
hhvmUbuntu Passing an attacker controlled size when creating an IOBuf could cause integer overflow, leading... 9.8 Critical -
hhvmUbuntu When unserializing an object with dynamic properties HHVM needs to pre-reserve the full size of... 9.8 Critical -
hhvmUbuntu The unserialize() function supported a type code, "S", which was meant to be supported only for... 7.5 High -
hhvmUbuntu The fb_unserialize function did not impose a depth limit for nested deserialization. That meant a... 7.5 High -
hhvmUbuntu Due to incorrect string size calculations inside the preg_quote function, a large input string... 9.8 Critical -
hhvmUbuntu In the crypt function, we attempt to null terminate a buffer using the size of the input salt... 7.5 High -
hhvmUbuntu Incorrect bounds calculations in substr_compare could lead to an out-of-bounds read when the... 7.5 High -
hhvmUbuntu In-memory file operations (ie: using fopen on a data URI) did not properly restrict negative... 7.5 High -
hhvmUbuntu xbuf_format_converter, used as part of exif_read_data, was appending a terminating null character... 9.8 Critical -
hhvmUbuntu An incorrect size calculation in ldap_escape may lead to an integer overflow when overly long... 9.8 Critical -
hhvmUbuntu Insufficient boundary checks when decoding JSON in TryParse reads out of bounds memory,... 7.5 High -
hhvmUbuntu Insufficient boundary checks when decoding JSON in JSON_parser allows read access to out of... 8.1 High -
hhvmUbuntu Insufficient boundary checks when decoding JSON in handleBackslash reads out of bounds memory,... 7.5 High -
hhvmUbuntu HHVM does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does... 5.3 Medium -
hhvmUbuntu mcrypt_get_block_size did not enforce that the provided "module" parameter was a string, leading... 9.8 Critical -
hhvmUbuntu Insufficient type checks were employed prior to casting input data in SimpleXMLElement_exportNode... 9.8 Critical -
hhvmUbuntu Various APC functions accept keys containing null bytes as input, leading to premature truncation... 9.8 Critical -
hhvmUbuntu Insufficient boundary checks when processing a string in mb_ereg_replace allows access to out-of... 9.8 Critical -
hhvmUbuntu An invalid free in mb_detect_order can cause the application to crash or potentially result in... 9.8 Critical -
hhvmUbuntu hhvm before 3.12.11 has a use-after-free in the serialize_memoize_param() and ResourceBundle:... 9.8 Critical -
hhvmUbuntu Insufficient boundary checks when formatting numbers in number_format allows read/write access to... 9.8 Critical -
hhvmUbuntu Insufficient boundary checks when processing M_SOFx markers from JPEG headers in the GD extension... 9.8 Critical -
hhvmUbuntu Insufficient boundary checks when processing the JPEG APP12 block marker in the GD extension... 9.8 Critical -
hhvmUbuntu Call to the scrypt_enc() function in HHVM can lead to heap corruption by using specifically... 9.8 Critical -
hhvmUbuntu HHVM, when used with FastCGI, would bind by default to all available interfaces. This behavior... 7.5 High -
hhvmUbuntu Legacy C++ Facebook Thrift servers (using cpp instead of cpp2) would not error upon receiving... 7.5 High -
hhvmUbuntu Java Facebook Thrift servers would not error upon receiving messages with containers of fields of... 7.5 High -
hhvmUbuntu Python Facebook Thrift servers would not error upon receiving messages with containers of fields... 7.5 High -
hhvmUbuntu C++ Facebook Thrift servers (using cpp2) would not error upon receiving messages with containers... 7.5 High -
hhvmUbuntu Insufficient boundary checks for the strrpos and strripos functions allow access to out-of-bounds... 9.8 Critical -
hhvmUbuntu The implementations of streams for bz2 and php://output improperly implemented their readImpl... 9.8 Critical -
hhvmUbuntu The function number_format is vulnerable to a heap overflow issue when its second argument (... 9.8 Critical -
hhvmUbuntu The Memcache::getextendedstats function can be used to trigger an out-of-bounds read. Exploiting... 8.1 High -
hhvmUbuntu A Malformed h2 frame can cause 'std::out_of_range' exception when parsing priority meta data.... 7.5 High -
hhvmUbuntu Multipart-file uploads call variables to be improperly registered in the global scope. In cases... 9.8 Critical -
hhvmUbuntu A potential denial-of-service issue in the Proxygen handling of invalid HTTP2 settings which can... 5.9 Medium -
hhvmUbuntu Infinite recursion in wddx in Facebook HHVM before 3.15.0 allows attackers to have unspecified... 9.8 Critical -
hhvmUbuntu The array_*_recursive functions in Facebook HHVM before 3.15.0 allows attackers to have... 9.8 Critical -
hhvmUbuntu Self recursion in compact in Facebook HHVM before 3.15.0 allows attackers to have unspecified... 9.8 Critical -
hhvmUbuntu Integer overflow in StringUtil::implode in Facebook HHVM before 3.15.0 allows attackers to have... 9.8 Critical -
hhvmUbuntu Integer overflow in bcmath in Facebook HHVM before 3.15.0 allows attackers to have unspecified... 9.8 Critical -
hhvmUbuntu Out-of-bounds write in the (1) mb_detect_encoding, (2) mb_send_mail, and (3) mb_detect_order... 9.8 Critical -
hhvmUbuntu The php_url_parse_ex function in ext/standard/url.c in PHP before 5.5.38 allows remote attackers... 9.8 Critical -
hhvmUbuntu [Unknown description] No score -
hhvmUbuntu Directory traversal vulnerability in the ZipArchive::extractTo function in ext/zip/php_zip.c in... 4.3 Medium