CVE-2019-11929
9.8CRITICALInsufficient boundary checks when formatting numbers in number_format allows read/write access to out-of-bounds memory, potentially leading to remote code execution. This issue affects HHVM versions p
게시됨: 10/2/2019업데이트됨: 11/21/2024
설명
Insufficient boundary checks when formatting numbers in number_format allows read/write access to out-of-bounds memory, potentially leading to remote code execution. This issue affects HHVM versions prior to 3.30.10, all versions between 4.0.0 and 4.8.5, all versions between 4.9.0 and 4.18.2, and versions 4.19.0, 4.19.1, 4.20.0, 4.20.1, 4.20.2, 4.21.0, 4.22.0, 4.23.0.
AI 분석AI 기반
영향받는 제품
facebookhhvm
facebookhhvm
facebookhhvm
facebookhhvm
4.19.0
facebookhhvm
4.19.1
facebookhhvm
4.20.0
facebookhhvm
4.20.1
facebookhhvm
4.20.2
facebookhhvm
4.21.0
facebookhhvm
4.22.0
facebookhhvm
4.23.0
참조
- https://github.com/facebook/hhvm/commit/dbeb9a56a638e3fdcef8b691c2a2967132dae692PatchThird Party Advisory
- https://hhvm.com/blog/2019/09/25/security-update.htmlVendor Advisory
- https://www.facebook.com/security/advisories/cve-2019-11929Third Party Advisory
- https://github.com/facebook/hhvm/commit/dbeb9a56a638e3fdcef8b691c2a2967132dae692PatchThird Party Advisory
- https://hhvm.com/blog/2019/09/25/security-update.htmlVendor Advisory
- https://www.facebook.com/security/advisories/cve-2019-11929Third Party Advisory