An incorrect size calculation in ldap_escape may lead to an integer overflow when overly long input is passed in, resulting in an out-of-bounds write. This issue affects HHVM prior to 4.56.2, all versions between 4.57.0 and 4.78.0, 4.79.0, 4.80.0, 4.81.0, 4.82.0, 4.83.0.
[
{
"source": "https://github.com/facebook/hhvm/commit/abe0b29e4d3a610f9bc920b8be4ad8403364c2d4",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2020-1916-0234784f",
"target": {
"function": "string_crypt",
"file": "hphp/zend/zend-string.cpp"
},
"signature_type": "Function",
"digest": {
"length": 1026.0,
"function_hash": "32315142391097408383139198570496751782"
}
},
{
"source": "https://github.com/facebook/hhvm/commit/abe0b29e4d3a610f9bc920b8be4ad8403364c2d4",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2020-1916-09445d85",
"target": {
"function": "HHVM_FUNCTION",
"file": "hphp/runtime/ext/ldap/ext_ldap.cpp"
},
"signature_type": "Function",
"digest": {
"length": 1066.0,
"function_hash": "291692884138443403556866798857962114658"
}
},
{
"source": "https://github.com/facebook/hhvm/commit/abe0b29e4d3a610f9bc920b8be4ad8403364c2d4",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2020-1916-0a32d419",
"target": {
"file": "hphp/util/light-process.cpp"
},
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"153300239319936645071886966036675704684",
"295904806967669368280944968971657809673",
"99133765804485045964521025334947039974",
"27638213683456027787784732021170501676",
"232899773815313318758223297449279710037",
"330492711637862273934584752513218455774",
"262052390326210208228353396764835323710",
"313728593756853567858467237598442512013",
"289602277122483461653262266133022845290",
"326024619064313388084882947918828063519",
"113013651368049508217712015126050111222",
"245024909404068567492141187432852991340",
"83783585964181254825343372950460196501",
"304715653248917398306495114447308687997",
"79957104101863333676120170936846531956",
"244625954361826096982381277199443765665",
"213742986222750926783507072284074984951",
"11512607156191155297697654043081255063",
"227502945880095007457971197159933878389",
"14220062232966461595945741712164448990",
"334711697991821347002431115270269041484",
"133667084158002356528098093311958931710",
"338739794592853516811355334627181684836",
"300560892279042939919704171831910480647"
]
}
},
{
"source": "https://github.com/facebook/hhvm/commit/abe0b29e4d3a610f9bc920b8be4ad8403364c2d4",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2020-1916-14c4ea79",
"target": {
"function": "do_change_user",
"file": "hphp/util/light-process.cpp"
},
"signature_type": "Function",
"digest": {
"length": 439.0,
"function_hash": "210275169280058316452295708979501353606"
}
},
{
"source": "https://github.com/facebook/hhvm/commit/abe0b29e4d3a610f9bc920b8be4ad8403364c2d4",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2020-1916-19ec7de5",
"target": {
"file": "hphp/runtime/base/preg.h"
},
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"36956090015315603017141730089953471639",
"46108539517113444196044381480482401829",
"285529554748387993144151444026503425585",
"95757993391105962874379486527881175395",
"279909141059809553946753373743161011402",
"222644702114683983152330080470903522342"
]
}
},
{
"source": "https://github.com/facebook/hhvm/commit/abe0b29e4d3a610f9bc920b8be4ad8403364c2d4",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2020-1916-1fdc5804",
"target": {
"function": "StringUtil::Crypt",
"file": "hphp/runtime/base/string-util.cpp"
},
"signature_type": "Function",
"digest": {
"length": 357.0,
"function_hash": "275941699024587600509015722083562254359"
}
},
{
"source": "https://github.com/facebook/hhvm/commit/abe0b29e4d3a610f9bc920b8be4ad8403364c2d4",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2020-1916-40e1f384",
"target": {
"file": "hphp/runtime/ext/gd/libgd/gd.cpp"
},
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"133133990269620441931601076727088208036",
"33451550003600826786761444827757739900",
"72318699131460137554481801561383294548",
"127575323953097060510672454560651395208",
"98556166875678876059390389437878699431"
]
}
},
{
"source": "https://github.com/facebook/hhvm/commit/abe0b29e4d3a610f9bc920b8be4ad8403364c2d4",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2020-1916-4dd8f687",
"target": {
"function": "BF_crypt",
"file": "hphp/zend/crypt-blowfish.cpp"
},
"signature_type": "Function",
"digest": {
"length": 3214.0,
"function_hash": "48151238394374505866032213935737154626"
}
},
{
"source": "https://github.com/facebook/hhvm/commit/abe0b29e4d3a610f9bc920b8be4ad8403364c2d4",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2020-1916-59c3fafc",
"target": {
"file": "hphp/zend/zend-string.cpp"
},
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"285307860804117296888475649272925383037",
"203140963140904758479303120912283789543",
"305971096830541567448209745483743876345",
"99087380231718981607408730419908837636",
"198442010505411655884685340383906509713",
"96574425334543627276230682454657178350",
"108234542512787891092982153958868934633",
"245466882000976464873518007985424594879",
"99710510706054418013678794616919852401",
"50830344810693748873405267658212530743",
"156640315850576854551657747447719459117",
"16268486499559022161171190776864309660",
"170161303246116206458985432406086441005"
]
}
},
{
"source": "https://github.com/facebook/hhvm/commit/abe0b29e4d3a610f9bc920b8be4ad8403364c2d4",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2020-1916-5f2f3181",
"target": {
"function": "PCRECache::dump",
"file": "hphp/runtime/base/preg.cpp"
},
"signature_type": "Function",
"digest": {
"length": 505.0,
"function_hash": "141690697493115597784134103222268311965"
}
},
{
"source": "https://github.com/facebook/hhvm/commit/abe0b29e4d3a610f9bc920b8be4ad8403364c2d4",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2020-1916-62c3888b",
"target": {
"file": "hphp/runtime/base/string-util.cpp"
},
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"1793073766555469182942809493908636688",
"32755577242573893587887539207297385257",
"313910954100440453697345401198147500265",
"334417825899089000540822912194129992618"
]
}
},
{
"source": "https://github.com/facebook/hhvm/commit/abe0b29e4d3a610f9bc920b8be4ad8403364c2d4",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2020-1916-71f2715d",
"target": {
"file": "hphp/runtime/base/preg.cpp"
},
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"107687481536417448823291068589799015071",
"69982210057059821548528228275127378258",
"198637955553749850684722500119168394023",
"338072890056362845985944150437161544810",
"127068174196052780959638939249628543218",
"294172404112476854756369650541535926493",
"271245107185950204020981110325041997979",
"109471751514030751056516505359911955419",
"21072984271207229276513245769172381970",
"63501944882734345342504606663967318246",
"105533043894144925862406501185260165926",
"219009430254836558242724939066245736376",
"32471999539746917184559537684063349181",
"77147949202207580158759164210199812787",
"217116797857328665720367537553226959825",
"187390400581312820850543241573290462996",
"206453790101751500523077322960474847907",
"257719742402946337479556951940827898789",
"40852789804335017178984256223726035676",
"34744683402240276451209631426060565779",
"172572521693954626916528770019528746116",
"152113751342323528145009810712275575016",
"191933700493712784589976270733783494162",
"33728178739004986832189929323540312355",
"18674323550594163514992874909756316669",
"12433677548103069598821337327127774160",
"147755252939738428553775747392870500673",
"221040499059921647307259877666274364380",
"328399668681233477568764616250435626843",
"65299917696952684662391254484468053329"
]
}
},
{
"source": "https://github.com/facebook/hhvm/commit/abe0b29e4d3a610f9bc920b8be4ad8403364c2d4",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2020-1916-76e0bba3",
"target": {
"function": "HHVM_METHOD",
"file": "hphp/runtime/ext/xmlreader/ext_xmlreader.cpp"
},
"signature_type": "Function",
"digest": {
"length": 776.0,
"function_hash": "160469826899761946032830380296828123408"
}
},
{
"source": "https://github.com/facebook/hhvm/commit/abe0b29e4d3a610f9bc920b8be4ad8403364c2d4",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2020-1916-89f13a15",
"target": {
"function": "gdImageCreateTrueColor",
"file": "hphp/runtime/ext/gd/libgd/gd.cpp"
},
"signature_type": "Function",
"digest": {
"length": 1522.0,
"function_hash": "1857107912704393790624450238173933774"
}
},
{
"source": "https://github.com/facebook/hhvm/commit/abe0b29e4d3a610f9bc920b8be4ad8403364c2d4",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2020-1916-90c7757f",
"target": {
"file": "hphp/runtime/ext/xmlreader/ext_xmlreader.cpp"
},
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"51001310750640145119218617241128215547",
"78056449833029906572124340700118762640",
"177425561368267329750379552618676606912",
"161160344212673577255587524586160946192",
"156715336778501878335361155674395202537",
"322015272536699240351359536712656463333",
"157339035177529793088941555175560421197",
"324205823850653789752628339716863510664"
]
}
},
{
"source": "https://github.com/facebook/hhvm/commit/abe0b29e4d3a610f9bc920b8be4ad8403364c2d4",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2020-1916-93ea1f80",
"target": {
"file": "hphp/runtime/server/admin-request-handler.cpp"
},
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"215668176756032931027443423984043464779",
"110843257751995697653975292145457031502",
"105815747251620859876177055909492952152",
"278219377990536847456801313924976805991",
"63918414930222345389271107157402297818",
"148866067944859151196776827743401414205",
"301863773670211270415550334285158739551",
"223089364518266010443786248749648563949",
"113532459417378750624453542556016058460",
"92664851771472992350272767684091996858",
"35435994434138394687317743775815047271",
"214148354504740524502862634943579521838",
"157922644326472591735980321141239831346",
"112065292815752692825421818003275904970",
"163475572636105789197204946265608522870",
"210526957247834183407598186090457924925",
"270530371589062420661448674334573942490",
"333319166371103717938224280564414912177",
"179855490062453847667244565705745427334",
"72586592103313927761423837911020494567",
"304241042268196883799333326745318345413",
"171994925688116974779693601808575114925",
"150441543242860013778956958757751332012",
"212251140865296008892322361899220172466",
"211405675831202126794840983439222652417",
"219838268974882931959005213476394383759",
"228200821063404197946329299273370677871",
"257544992021463746813414686023971197350",
"170282015193837413568097197997627939393",
"313318621160984465599265410528160573136",
"319293048894371409245553327354088026866"
]
}
},
{
"source": "https://github.com/facebook/hhvm/commit/abe0b29e4d3a610f9bc920b8be4ad8403364c2d4",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2020-1916-964230cd",
"target": {
"file": "hphp/runtime/base/runtime-option.cpp"
},
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"328769473553441248613162905715291591864",
"120481257849985986449240125362173557472",
"243417452934957518609290219156289488360",
"254157856435306279685707401947233667091",
"268887195265540793255768295014883514495",
"272243386757027999421563719416103199372",
"279333701603258864656433436343087072789",
"139517654840667491787661872558587041318",
"307307323387413010999661907504280234363",
"200546423623476840162547150627518205231",
"93207636470684901049904820363453873098",
"163576639998042084370541882343016989449",
"331851349351708720922416324967230473014",
"169223595922074710528794269501580630185",
"97906430830768358989964843249259497199",
"314996172691647860438955402719703094146"
]
}
},
{
"source": "https://github.com/facebook/hhvm/commit/abe0b29e4d3a610f9bc920b8be4ad8403364c2d4",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2020-1916-9910dc7b",
"target": {
"file": "hphp/runtime/base/runtime-option.h"
},
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"132302892312948806749643493054127692338",
"144544364579782948276482057326356876545",
"251381907063100539551610120719393741884"
]
}
},
{
"source": "https://github.com/facebook/hhvm/commit/abe0b29e4d3a610f9bc920b8be4ad8403364c2d4",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2020-1916-a2fc9318",
"target": {
"file": "hphp/zend/crypt-blowfish.cpp"
},
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"336594479859397113917263131919658546339",
"246187896042649276162794578932354389789",
"169905785816511821689786995722163931251",
"182404583683536765622541642402193096007",
"161276781042250450362225560849487743297"
]
}
},
{
"source": "https://github.com/facebook/hhvm/commit/abe0b29e4d3a610f9bc920b8be4ad8403364c2d4",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2020-1916-a3e29de2",
"target": {
"function": "AdminRequestHandler::handleRequest",
"file": "hphp/runtime/server/admin-request-handler.cpp"
},
"signature_type": "Function",
"digest": {
"length": 23944.0,
"function_hash": "200814695898816512142257541460696318322"
}
},
{
"source": "https://github.com/facebook/hhvm/commit/abe0b29e4d3a610f9bc920b8be4ad8403364c2d4",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2020-1916-ae968ce3",
"target": {
"function": "pcre_dump_cache",
"file": "hphp/runtime/base/preg.cpp"
},
"signature_type": "Function",
"digest": {
"length": 73.0,
"function_hash": "128635506455363568584529033795189545169"
}
},
{
"source": "https://github.com/facebook/hhvm/commit/abe0b29e4d3a610f9bc920b8be4ad8403364c2d4",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2020-1916-bd9a90fa",
"target": {
"file": "hphp/runtime/ext/ldap/ext_ldap.cpp"
},
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"46232892469802242532894149464515063868",
"109498395471905747547346822559054342238",
"116069554465826252841053201067559388729",
"247971463080932680607418900398944948319"
]
}
},
{
"source": "https://github.com/facebook/hhvm/commit/abe0b29e4d3a610f9bc920b8be4ad8403364c2d4",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2020-1916-d0a37e2a",
"target": {
"file": "hphp/runtime/server/admin-request-handler.h"
},
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"60364244777355772386698881230823267842",
"165166594758250700767704707346439579075",
"69913749781242406406180725924867127315",
"172397043813504108647050187347398086944",
"82316755028964617845333724473144500920",
"185058460107310527586016199092572513256",
"203112486371261279816640313349378502108",
"44297471342902903899149510898537974633"
]
}
},
{
"source": "https://github.com/facebook/hhvm/commit/abe0b29e4d3a610f9bc920b8be4ad8403364c2d4",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2020-1916-deb4fb16",
"target": {
"function": "AdminRequestHandler::handleDumpStaticStringsRequest",
"file": "hphp/runtime/server/admin-request-handler.cpp"
},
"signature_type": "Function",
"digest": {
"length": 658.0,
"function_hash": "117515758510859782512496948006273067755"
}
},
{
"source": "https://github.com/facebook/hhvm/commit/abe0b29e4d3a610f9bc920b8be4ad8403364c2d4",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2020-1916-e0928be6",
"target": {
"file": "hphp/util/light-process.h"
},
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"13256810394560000746740672437856290318",
"7916080787635857232121587362895192014",
"122861357710270454488169248264177681480"
]
}
},
{
"source": "https://github.com/facebook/hhvm/commit/abe0b29e4d3a610f9bc920b8be4ad8403364c2d4",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2020-1916-eff9f06c",
"target": {
"file": "hphp/runtime/ext/domdocument/ext_domdocument.h"
},
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"108081873869946675601317064931170347298",
"58181243662334894874393775723671006129",
"131590539913466560493344430516858171120",
"180075591739058228336205742578146353466"
]
}
}
]