Information disclosure in Facebook Hiphop_virtual_machine

CVE-2014-6229

The HashContext class in hphp/runtime/ext/ext_hash.cpp in Facebook HipHop Virtual Machine (HHVM) before 3.3.0 incorrectly expects that a certain key string uses '\0' for termination, which allows remote attackers to obtain sensitive inform…

Vulnerability class: Information Disclosure

EPSS: 0.017 (74.4th percentile) — read the EPSS interpretation.

Affected products

Facebook Hiphop_virtual_machine
N/a — versions n/a

Weakness classification (CWE)

CWE-200 — Information Disclosure

References

cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)
cve@mitre.org (x_refsource_CONFIRM)