HIGH
The unserialize() function supported a type code, "S", which was meant to be supported only for APC serialization
Published Mar 11, 2021
7.5
HIGHCVSS 3.1
EPSS 1.22%
Description
The unserialize() function supported a type code, "S", which was meant to be supported only for APC serialization. This type code allowed arbitrary memory addresses to be accessed as if they were static StringData objects. This issue affected HHVM prior to v4.32.3, between versions 4.33.0 and 4.56.0, 4.57.0, 4.58.0, 4.58.1, 4.59.0, 4.60.0, 4.61.0, 4.62.0.
Affected products
-
- Version 4.33.0StatusaffectedConstraints<unspecified
- Version 4.57.0StatusaffectedConstraints-
- Version 4.58.0StatusaffectedConstraints<unspecified
- Version 4.59.0StatusaffectedConstraints-
- Version 4.60.0StatusaffectedConstraints-
- Version 4.61.0StatusaffectedConstraints-
- Version 4.62.0StatusaffectedConstraints-
- Version unspecifiedStatusaffectedConstraints<4.32.3
- Version 4.32.3StatusunaffectedConstraints<unspecified
- Version 4.56.1StatusunaffectedConstraints<unspecified
- Version 4.57.1StatusunaffectedConstraints<unspecified
- Version 4.58.2StatusunaffectedConstraints<unspecified
- Version 4.59.1StatusunaffectedConstraints<unspecified
- Version 4.60.1StatusunaffectedConstraints<unspecified
- Version 4.61.1StatusunaffectedConstraints<unspecified
- Version 4.62.1StatusunaffectedConstraints<unspecified
- Version
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | |||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| HHVM | n/a |
|
OR
- < 4.32.3
- ≥ 4.33.0 · < 4.56.1
- 4.57.0
- 4.58.0
- 4.58.1
- 4.59.0
- 4.60.0
- 4.61.0
- 4.62.0
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Weaknesses (2)
References (3)
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-12725 Advisory
- https://github.com/facebook/hhvm/commit/1107228a5128d3ca1c4add8ac1635d933cbbe2e9 x_refsource_MISCPatchThird Party Advisory
- https://hhvm.com/blog/2020/06/30/security-update.html x_refsource_CONFIRMVendor Advisory
| Link | Providers | Tags |
|---|---|---|
| https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-12725 | Advisory | |
| https://github.com/facebook/hhvm/commit/1107228a5128d3ca1c4add8ac1635d933cbbe2e9 | x_refsource_MISCPatchThird Party Advisory | |
| https://hhvm.com/blog/2020/06/30/security-update.html | x_refsource_CONFIRMVendor Advisory |
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner facebook
Published Mar 11, 2021
Updated Aug 4, 2024
Reserved Dec 2, 2019
Link CVE-2020-1899
CISA Vulnrichment
Updated n/a
ENISA EUVD
EUVD-2020-12725 Assigner facebook
Published Mar 11, 2021
Updated Aug 4, 2024
Exploited since n/a
Link EUVD-2020-12725