CVE-2020-1918
Last modified
CVE-2020-1918 is a high-severity vulnerability rated 7.5/10 on the CVSS scale. In-memory file operations (ie: using fopen on a data URI) did not properly restrict negative seeking, allowing for the reading of memory prior to the in-memory buffer. This issue affects HHVM versions prior to 4.56.3, all versions between 4.57.0 and 4.80.1, all versions between 4.81.0 and 4.93.1, and versions 4.94.0, 4.95.0, 4.96.0, 4.97.0, 4.98.0.. EPSS estimates a 1.22% chance of exploitation in the next 30 days.
Description
In-memory file operations (ie: using fopen on a data URI) did not properly restrict negative seeking, allowing for the reading of memory prior to the in-memory buffer. This issue affects HHVM versions prior to 4.56.3, all versions between 4.57.0 and 4.80.1, all versions between 4.81.0 and 4.93.1, and versions 4.94.0, 4.95.0, 4.96.0, 4.97.0, 4.98.0.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Hhvm | < 4.56.3 | |
| Hhvm | >= 4.57.0, < 4.80.2 | |
| Hhvm | >= 4.81.0, < 4.93.2 | |
| Hhvm | 4.94.0 | |
| Hhvm | 4.95.0 | |
| Hhvm | 4.96.0 | |
| Hhvm | 4.97.0 | |
| Hhvm | 4.98.0 |
References
- https://github.com/facebook/hhvm/commit/08193b7f0cd3910256e00d599f0f3eb2519c44caPatch, Third Party Advisory
- https://hhvm.com/blog/2021/02/25/security-update.htmlRelease Notes, Vendor Advisory
- https://github.com/facebook/hhvm/commit/08193b7f0cd3910256e00d599f0f3eb2519c44caPatch, Third Party Advisory
- https://hhvm.com/blog/2021/02/25/security-update.htmlRelease Notes, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2020-1918?
How severe is CVE-2020-1918?
How do I fix CVE-2020-1918?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2020
- CVE-2020-19157Cross Site Scripting (CSS) in Wenku CMS v3.4 allows remote a…6.1
- CVE-2020-19158Cross Site Scripting (XSS) in S-CMS build 20191014 and earli…5.4
- CVE-2020-19159Cross Site Request Forgery (CSRF) in LaikeTui v3 allows remo…8.8
- CVE-2020-1916An incorrect size calculation in ldap_escape may lead to an …9.8
- CVE-2020-19165PHPSHE 1.7 has SQL injection via the admin.php?mod=user&user…9.8
- CVE-2020-1917xbuf_format_converter, used as part of exif_read_data, was a…9.8
- CVE-2020-19185Buffer Overflow vulnerability in one_one_mapping function in…6.5
- CVE-2020-19186Buffer Overflow vulnerability in _nc_find_entry function in …6.5
- CVE-2020-19187Buffer Overflow vulnerability in fmt_entry function in progs…6.5
- CVE-2020-19188Buffer Overflow vulnerability in fmt_entry function in progs…6.5
- CVE-2020-19189Buffer Overflow vulnerability in postprocess_terminfo functi…6.5
- CVE-2020-1919Incorrect bounds calculations in substr_compare could lead t…7.5
Are you affected by CVE-2020-1918?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST