CVE-2020-1916

An incorrect size calculation in ldap_escape may lead to an integer overflow when overly long input is passed in, resulting in an out-of-bounds write. This issue affects HHVM prior to 4.56.2, all versions between 4.57.0 and 4.78.0, 4.79.0, 4.80.0, 4.81.0, 4.82.0, 4.83.0.

We have discovered 256 live websites that are affected by CVE-2020-1916.

Run a Free Instant Scan

Affected Software

Product	HHVM
Category	Web Servers
Vulnerable Domains	256 live websites (100% of HHVM install base)
Vulnerable Versions	from 0 through 4.56.2 from 4.79 through 4.79 from 4.80 through 4.80 from 4.81 through 4.81 from 4.82 through 4.82 from 4.83 through 4.83
Vulnerable Versions Count	20 versions ( 95% of all versions)