RCE in Facebook Hiphop_virtual_machine
CVE-2014-2208
CRLF injection vulnerability in the LightProcess protocol implementation in hphp/util/light-process.cpp in Facebook HipHop Virtual Machine (HHVM) before 2.4.2 allows remote attackers to execute arbitrary commands by entering a \n (newline)…
Vulnerability class: RCE (Remote Code Execution)
EPSS: 0.027 (84.2th percentile) — read the EPSS interpretation.
Affected products
- Facebook Hiphop_virtual_machine
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (x_refsource_CONFIRM)