2 lines
1.1 KiB
JSON
2 lines
1.1 KiB
JSON
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"HHVM","vendor":"Facebook","versions":[{"lessThan":"23c061f4e804a51badd5f85227e65185651253b5","status":"affected","version":"0","versionType":"git"}]}],"source":"cve-assign@fb.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"When parsing request variables such as query-string and form parameters, HHVM did not check that appending a nested array succeeded before descending into it. A remote, unauthenticated attacker could send a GET or POST request which would crash the HHVM server process before any application code runs, leading to denial of service. This issue affected HHVM prior to 23c061f4e804a51badd5f85227e65185651253b5."}],"id":"CVE-2026-119723","lastModified":"2026-11-11T17:17:17.220","metrics":{},"published":"2026-11-11T17:17:17.220","references":[{"source":"cve-assign@fb.com","url":"https://github.com/meta/hhvm/commit/23c061f4e804a51badd5f85227e65185651253b5"},{"source":"cve-assign@fb.com","url":"https://www.facebook.com/security/advisories/cve-2026-119723"}],"sourceIdentifier":"cve-assign@fb.com","vulnStatus":"Received"}
|