Unscored CVE-2016-6872 EUVD-2016-7757GHSA-c86q-7gh5-jc6w

Integer overflow in StringUtil::implode in Facebook HHVM before 3.15.0 allows attackers to have unspecified impact via unknown vectors.

Published Feb 17, 2017 · Updated Aug 6, 2024 · Assigned by mitre

Description

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Ubuntu

Security tracker ↗

Release	Package	Fixed in	Advisory
Ubuntu 16.04 LTS	hhvm	No fix yet	—

References

[oss-security] 20160811 CVE Requests Facebook HHVM mailing-list
https://github.com/facebook/hhvm/commit/2c9a8fcc73a151608634d3e712973d192027c271
[oss-security] 20160818 Re: CVE Requests Facebook HHVM mailing-list