PT-2021-10310
CVE-2020-1921
·
تاريخ النشر
2021-03-10
·
تاريخ التحديث
2021-03-15
الوصف من
CVSS 3.1
7.5
عاليةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions:
HHVM versions prior to 4.56.3
HHVM versions 4.57.0 through 4.80.1
HHVM versions 4.81.0 through 4.93.1
HHVM versions 4.94.0 through 4.98.0
Description:
The issue arises in the crypt function where it attempts to null terminate a buffer using the size of the input salt without validating that the offset is within the buffer.
Recommendations:
For versions prior to 4.56.3, update to version 4.56.3 or later.
For versions 4.57.0 through 4.80.1, update to version 4.80.2 or later.
For versions 4.81.0 through 4.93.1, update to version 4.93.2 or later.
For versions 4.94.0 through 4.98.0, update to a version later than 4.98.0.
As a temporary workaround, consider disabling the crypt function until a patch is available.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾