CVE-2019-3570

First published: Thu Jul 18 2019(Updated: )

Call to the scrypt_enc() function in HHVM can lead to heap corruption by using specifically crafted parameters (N, r and p). This happens if the parameters are configurable by an attacker for instance by providing the output of scrypt_enc() in a context where Hack/PHP code would attempt to verify it by re-running scrypt_enc() with the same parameters. This could result in information disclosure, memory being overwriten or crashes of the HHVM process. This issue affects versions 4.3.0, 4.4.0, 4.5.0, 4.6.0, 4.7.0, 4.8.0, versions 3.30.5 and below, and all versions in the 4.0, 4.1, and 4.2 series.

Credit: cve-assign@fb.com

Affected Software	Affected Version	How to fix
Facebook HipHop Virtual Machine	<=3.30.5
Facebook HipHop Virtual Machine	>=4.0.0<=4.0.4
Facebook HipHop Virtual Machine	=4.1.0
Facebook HipHop Virtual Machine	=4.2.0
Facebook HipHop Virtual Machine	=4.3.0
Facebook HipHop Virtual Machine	=4.4.0
Facebook HipHop Virtual Machine	=4.5.0
Facebook HipHop Virtual Machine	=4.6.0
Facebook HipHop Virtual Machine	=4.7.0
Facebook HipHop Virtual Machine	=4.8.0

Remedy

https://github.com/facebook/hhvm/commit/cc331e4349e91706a673e2a09f1f2ea5bbb33815

Never miss a vulnerability like this again

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.