This site currently shows sample data for demonstration.
BDVDB
বাংলা

Vulnerabilities

CVE-2018-6337 | BDVDB-2026-111134 Detail

FacebookHHVM

Description#

folly::secureRandom will re-use a buffer between parent and child processes when fork() is called. That will result in multiple forked children producing repeat (or similar) results. This affects HHVM 3.26 prior to 3.26.3 and the folly library between v2017.12.11.00 and v2018.08.09.00.

Impact#

Per CVSS v3.1: confidentiality impact none, integrity impact high, availability impact none. Attack vector: network.

Weaknesses#

  • CWE-212 Improper Cross-boundary Removal of Sensitive Data (CWE-212)

References#

Exploit#

No public exploit known

History#

  1. Version 1Record published in the CVE List.
  2. Version 2Most recent update recorded in the CVE List.