CVE-2020-1921

In the crypt function, we attempt to null terminate a buffer using the size of the input salt without validating that the offset is within the buffer. This issue affects HHVM versions prior to 4.56.3, all versions between 4.57.0 and 4.80.1, all versions between 4.81.0 and 4.93.1, and versions 4.94.0, 4.95.0, 4.96.0, 4.97.0, 4.98.0.

List of 288 websites affected by CVE-2020-1921

The domain names are hidden due to the sensitivity of the data. Please click on the "Contact us" button above to get more information.

Domain	Country	Rank
*******.com	United States	,*
******.cz	Czech Republic	*,*
.******.com	United States	*,*
********************.com	France	*,*
************.tv	United States	*,*
*********************.com	United States	*,*
*******.jp	Japan	,,*
.*****.com	France	,,*
****************.org	United States	,,*
*********.com	United States	,,*
****.farm	France	,,*
**************.com	United States	,,*
******.********.com	United States	,,*
*****.*****.*.au	Australia	,,*
*.******.com	United States	,,*
****.***.de	Germany	,,*
****.be	Netherlands	,,*
**.***.is	United States	,,*
********.fr	United States	,,*
*****.coffee	United States	,,*