Loading HuntDB...
Hunt
Vulnerability Intelligence by wss.sh
Home Daily Briefings High Impact CVEs Recent Exploits KEV Catalog GitHub Advisories Latest Updates Security News
Sign In Sign Up

CVE-2020-1892

UNKNOWN
Published 2020-03-03T15:00:26
Actions:

Expert Analysis

Professional remediation guidance

Get tailored security recommendations from our analyst team for CVE-2020-1892. We'll provide specific mitigation strategies based on your environment and risk profile.

No CVSS data available

Description

Insufficient boundary checks when decoding JSON in JSON_parser allows read access to out of bounds memory, potentially leading to information leak and DOS. This issue affects HHVM 4.45.0, 4.44.0, 4.43.0, 4.42.0, 4.41.0, 4.40.0, 4.39.0, versions between 4.33.0 and 4.38.0 (inclusive), versions between 4.9.0 and 4.32.0 (inclusive), and versions prior to 4.8.7.

Available Exploits

No exploits available for this CVE.

Related News

No news articles found for this CVE.

Affected Products

Facebook

HHVM

Affected Versions:

4.45.1 4.45.0 4.44.1 4.44.0 4.43.1 4.43.0 4.42.1 4.42.0 4.41.1 4.41.0 4.40.1 4.40.0 4.39.1 4.39.0 4.38.1 4.33.0 4.32.1 4.9.0 4.8.7 unspecified

GitHub Security Advisories

Community-driven vulnerability intelligence from GitHub

⚠ Unreviewed MODERATE

GHSA-r2qf-75cq-8rxc

Advisory Details

Insufficient boundary checks when decoding JSON in JSON_parser allows read access to out of bounds memory, potentially leading to information leak and DOS. This issue affects HHVM 4.45.0, 4.44.0, 4.43.0, 4.42.0, 4.41.0, 4.40.0, 4.39.0, versions between 4.33.0 and 4.38.0 (inclusive), versions between 4.9.0 and 4.32.0 (inclusive), and versions prior to 4.8.7.

CVSS Scoring

CVSS Score

5.0

References

ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2020-1892
WEB https://github.com/facebook/hhvm/commit/dabd48caf74995e605f1700344f1ff4a5d83441d
WEB https://hhvm.com/blog/2020/02/20/security-update.html

Advisory provided by GitHub Security Advisory Database. Published: May 24, 2022, Modified: May 24, 2022

References

https://hhvm.com/blog/2020/02/20/security-update.html
https://github.com/facebook/hhvm/commit/dabd48caf74995e605f1700344f1ff4a5d83441d
Published: 2020-03-03T15:00:26
Last Modified: 2024-08-04T06:53:59.519Z
Copied to clipboard!