CVE-2019-11929: Buffer Overflow
First published: Wed Oct 02 2019(Updated: )
Credit: cve-assign@fb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Facebook HHVM | <3.30.10 | |
| Facebook HHVM | >=4.0.0<=4.8.5 | |
| Facebook HHVM | >=4.9.0<=4.18.2 | |
| Facebook HHVM | =4.19.0 | |
| Facebook HHVM | =4.19.1 | |
| Facebook HHVM | =4.20.0 | |
| Facebook HHVM | =4.20.1 | |
| Facebook HHVM | =4.20.2 | |
| Facebook HHVM | =4.21.0 | |
| Facebook HHVM | =4.22.0 | |
| Facebook HHVM | =4.23.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2019-11929?
CVE-2019-11929 is a vulnerability in HHVM that allows for read/write access to out-of-bounds memory, potentially leading to remote code execution.
Which versions of HHVM are affected by CVE-2019-11929?
HHVM versions prior to 3.30.10, all versions between 4.0.0 and 4.8.5, all versions between 4.9.0 and 4.18.2, and versions 4.19.0 to 4.23.0 are affected.
What is the severity of CVE-2019-11929?
The severity of CVE-2019-11929 is critical with a CVSS score of 9.8.
How can I fix CVE-2019-11929?
To fix CVE-2019-11929, update HHVM to version 3.30.10 or newer, version 4.8.6 or newer, version 4.18.3 or newer, or version 4.23.1 or newer.
Where can I find more information about CVE-2019-11929?
You can find more information about CVE-2019-11929 on the GitHub page for the HHVM commit addressing the vulnerability, the HHVM blog, and the Facebook security advisories page.
- collector/nvd-index
- agent/weakness
- agent/references
- agent/severity
- agent/author
- agent/tags
- agent/type
- agent/event
- agent/softwarecombine
- agent/first-publish-date
- vendor/facebook
- canonical/facebook hhvm
- version/facebook hhvm/4.0.0
- version/facebook hhvm/4.8.5
- version/facebook hhvm/4.9.0
- version/facebook hhvm/4.18.2
- version/facebook hhvm/4.19.0
- version/facebook hhvm/4.19.1
- version/facebook hhvm/4.20.0
- version/facebook hhvm/4.20.1
- version/facebook hhvm/4.20.2
- version/facebook hhvm/4.21.0
- version/facebook hhvm/4.22.0
- version/facebook hhvm/4.23.0