Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2019-3569

HHVM, when used with FastCGI, would bind by default to all available interfaces. This behavior could allow a malicious individual unintended direct access to the application, which

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
facebook

Description

HHVM, when used with FastCGI, would bind by default to all available interfaces. This behavior could allow a malicious individual unintended direct access to the application, which could result in information disclosure. This issue affects versions 4.3.0, 4.4.0, 4.5.0, 4.6.0, 4.7.0, 4.8.0, versions 3.30.5 and below, and all versions in the 4.0, 4.1, and 4.2 series.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Facebook HHVM

  • 4.8.1affected
  • 4.8.0affected
  • 4.7.1affected
  • 4.7.0affected
  • 4.6.1affected
  • 4.6.0affected
  • 4.5.1affected
  • 4.5.0affected
  • 4.4.1affected
  • 4.4.0affected
  • 4.3.1affected
  • 4.0.0 to < unspecifiedaffected
  • 3.30.6affected
  • unspecified to ≤ 3.30.5affected

References