Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2018-6337

folly::secureRandom will re-use a buffer between parent and child processes when fork() is called. That will result in multiple forked children producing repeat (or similar) result

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
facebook

Description

folly::secureRandom will re-use a buffer between parent and child processes when fork() is called. That will result in multiple forked children producing repeat (or similar) results. This affects HHVM 3.26 prior to 3.26.3 and the folly library between v2017.12.11.00 and v2018.08.09.00.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Facebook HHVM

  • 3.26.3affected
  • 3.26.0 to < unspecifiedaffected
  • unspecified to < 3.26.0unaffected

Facebook folly

  • v2018.08.09.00affected
  • v2017.12.11.00 to < unspecifiedaffected
  • unspecified to < v2017.12.11.00unaffected

References