Skip to content
OpenAdvisories
High · 7.5 CVE-2018-6337 EUVD-2018-18097GHSA-46jm-3g2r-j53x

folly::secureRandom will re-use a buffer between parent and child processes when fork() is called. That will result in multiple forked chil…

Published Dec 31, 2018 · Updated May 6, 2025 · Assigned by facebook

Description

folly::secureRandom will re-use a buffer between parent and child processes when fork() is called. That will result in multiple forked children producing repeat (or similar) results. This affects HHVM 3.26 prior to 3.26.3 and the folly library between v2017.12.11.00 and v2018.08.09.00.

Affected products

VendorProductAffectedFixed
Facebook HHVM 3.26.3, 3.26.0 – < unspecified unspecified
Facebook folly v2018.08.09.00, v2017.12.11.00 – < unspecified unspecified

References