Vulnerability in Facebook Folly

CVE-2018-6337

folly::secureRandom will re-use a buffer between parent and child processes when fork() is called. That will result in multiple forked children producing repeat (or similar) results. This affects HHVM 3.26 prior to 3.26.3 and the folly lib…

EPSS: 0.003 (50.9th percentile) — read the EPSS interpretation.