CVE-2019-3569
CVE-2019-3569
This page contains facts from public vulnerability sources. Check the original advisory before updating.
HHVM, when used with FastCGI, would bind by default to all available interfaces. This behavior could allow a malicious individual unintended direct access to the application, which could result in information disclosure. This issue affects versions 4.3.0, 4.4.0, 4.5.0, 4.6.0, 4.7.0, 4.8.0, versions 3.30.5 and below, and all versions in the 4.0, 4.1, and 4.2 series.
CVSS 7.5 · High · EPSS 1.5%
- Published
- Updated
Stack: system
Affected products and versions
hhvm
- Versions
- 4.8.1: Affected
- 4.8.0: Affected
- 4.7.1: Affected
- 4.7.0: Affected
- 4.6.1: Affected
- 4.6.0: Affected
- 4.5.1: Affected
- 4.5.0: Affected
- 4.4.1: Affected
- 4.4.0: Affected
- 4.3.1: Affected
- ≥ 4.0.0, < unspecified: Affected (custom)
- 3.30.6: Affected
- ≥ unspecified, ≤ 3.30.5: Affected (custom)
No fix published
hhvm Ubuntu:16.04:LTS
- Versions
- 3.11.0+dfsg-1
- 3.11.1+dfsg-1
- 3.11.1+dfsg-1ubuntu1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
hhvm Ubuntu:18.04:LTS
- Versions
- 3.21.0+dfsg-2
- 3.21.0+dfsg-2build1
- 3.21.0+dfsg-2build2
- 3.21.0+dfsg-2build3
- 3.21.0+dfsg-2ubuntu2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published