Unscored CVE-2016-6873 EUVD-2016-7758GHSA-hj8w-h393-6h4r

Self recursion in compact in Facebook HHVM before 3.15.0 allows attackers to have unspecified impact via unknown vectors.

Published Feb 17, 2017 · Updated Aug 6, 2024 · Assigned by mitre

Description

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Ubuntu

Security tracker ↗

Release	Package	Fixed in	Advisory
Ubuntu 16.04 LTS	hhvm	No fix yet	—

References

[oss-security] 20160811 CVE Requests Facebook HHVM mailing-list
https://github.com/facebook/hhvm/commit/e264f04ae825a5d97758130cf8eec99862517e7e
[oss-security] 20160818 Re: CVE Requests Facebook HHVM mailing-list