High
Security advisory
HHVM supports the use of an "admin" server which accepts administrative requests over HTTP. One of those request handlers, dump-pcre-cache, can be used to output cached regular expressions from the current execution context into a file. The handler takes a parameter which specifies where on the filesystem to write this data. The parameter is not validated, allowing a malicious user to overwrite arbitrary files where the user running HHVM has write access. This issue affects HHVM versions prior to 4.56.2, all versions between 4.57.0 and 4.78.0, as well as 4.79.0, 4.80.0, 4.81.0, 4.82.0, and 4.83.0.
- Products
- Not specified
- Affected versions
- Not specified
- Fixed versions
- Not specified
- CVEs
- CVE-2019-3556
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 31 Oct 2026, 12:33 UTC · Revision 1
Source evidence
HHVM supports the use of an "admin" server which accepts administrative requests over HTTP. One of those request handlers, dump-pcre-cache, can be used to output cached regular expressions from the current execution context into a file. The handler takes a parameter which specifies where on the filesystem to write this data. The parameter is not validated, allowing a malicious user to overwrite arbitrary files where the user running HHVM has write access. This issue affects HHVM versions prior to 4.56.2, all versions between 4.57.0 and 4.78.0, as well as 4.79.0, 4.80.0, 4.81.0, 4.82.0, and 4.83.0.
osv:CVE-2019-3556
Complete source record
{
"id": "e72d151a8f6e9e1ebc1089c4a953fd459a3748758f5d2385bca4228bd027d55b",
"url": "https://osv.dev/vulnerability/CVE-2019-3556",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "CVE-2019-3556",
"summary": "HHVM supports the use of an \"admin\" server which accepts administrative requests over HTTP. One of those request handlers, dump-pcre-cache, can be used to output cached regular expressions from the current execution context into a file. The handler takes a parameter which specifies where on the filesystem to write this data. The parameter is not validated, allowing a malicious user to overwrite arbitrary files where the user running HHVM has write access. This issue affects HHVM versions prior to 4.56.2, all versions between 4.57.0 and 4.78.0, as well as 4.79.0, 4.80.0, 4.81.0, 4.82.0, and 4.83.0.",
"evidence": "osv:CVE-2019-3556",
"products": [],
"severity": "high",
"structured": {
"id": "CVE-2019-3556",
"aliases": [
"CVE-2019-3556"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H"
}
],
"affected": [
{
"ranges": [
{
"repo": "https://github.com/facebook/hhvm",
"type": "GIT",
"events": [
{
"introduced": "0"
},
{
"fixed": "ee529270ee34b45efe3ae71319c96ea0775b2308"
},
{
"introduced": "ce87598e3c65a922a6e25c7119e2446f1fa6a4b6"
},
{
"last_affected": "e6a3c98c51554791316591dad9c96d958aa96137"
},
{
"introduced": "b0ab25016bc2839ab3fb433d375de0f6e7242065"
},
{
"last_affected": "4aa554372ba54b0dadc7c1fbbe9188330efa8c4a"
}
],
"database_specific": {
"extracted_events": [
{
"cpe": "cpe:2.3:a:facebook:hhvm:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "0"
},
{
"fixed": "4.56.2"
}
],
"source": "CPE_RANGE"
},
{
"cpe": "cpe:2.3:a:facebook:hhvm:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "4.57.0"
},
{
"last_affected": "4.78.0"
}
],
"source": "CPE_RANGE"
},
{
"cpe": "cpe:2.3:a:facebook:hhvm:4.79.0:*:*:*:*:*:*:*",
"range": [
{
"introduced": "4.79.0"
},
{
"last_affected": "4.79.0"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:facebook:hhvm:4.80.0:*:*:*:*:*:*:*",
"range": [
{
"introduced": "4.80.0"
},
{
"last_affected": "4.80.0"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:facebook:hhvm:4.81.0:*:*:*:*:*:*:*",
"range": [
{
"introduced": "4.81.0"
},
{
"last_affected": "4.81.0"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:facebook:hhvm:4.82.0:*:*:*:*:*:*:*",
"range": [
{
"introduced": "4.82.0"
},
{
"last_affected": "4.82.0"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:facebook:hhvm:4.83.0:*:*:*:*:*:*:*",
"range": [
{
"introduced": "4.83.0"
},
{
"last_affected": "4.83.0"
}
],
"source": "CPE_STRING"
}
]
}
}
],
"versions": [
"4.79.0",
"4.80.0",
"4.81.0",
"4.82.0",
"4.83.0",
"HHVM-4.83.0",
"nightly-2020.11.09",
"nightly-2020.11.08",
"nightly-2020.11.07",
"nightly-2020.11.06",
"nightly-2020.11.05",
"nightly-2020.11.04",
"nightly-2020.11.03",
"nightly-2020.11.02",
"nightly-2020.11.01",
"nightly-2020.10.31",
"nightly-2020.10.30",
"nightly-2020.10.29",
"nightly-2020.10.28",
"nightly-2020.10.27",
"nightly-2020.10.26",
"nightly-2020.10.25",
"nightly-2020.10.24",
"nightly-2020.10.23",
"nightly-2020.10.22",
"nightly-2020.10.21",
"nightly-2020.10.20",
"nightly-2020.10.19",
"nightly-2020.10.18",
"nightly-2020.10.17",
"nightly-2020.10.16",
"nightly-2020.10.15",
"nightly-2020.10.14",
"nightly-2020.10.13",
"nightly-2020.10.12",
"nightly-2020.10.11",
"nightly-2020.10.10",
"nightly-2020.10.09",
"nightly-2020.10.08",
"nightly-2020.10.07",
"HHVM-4.78.0",
"nightly-2020.10.06",
"nightly-2020.10.05",
"nightly-2020.10.04",
"nightly-2020.10.03",
"nightly-2020.10.02",
"nightly-2020.10.01",
"nightly-2020.09.30",
"nightly-2020.09.29",
"nightly-2020.09.28",
"nightly-2020.09.27",
"nightly-2020.09.26",
"nightly-2020.09.25",
"nightly-2020.09.24",
"nightly-2020.09.23",
"nightly-2020.09.22",
"nightly-2020.09.21",
"nightly-2020.09.20",
"nightly-2020.09.19",
"nightly-2020.09.18",
"nightly-2020.09.17",
"nightly-2020.09.16",
"nightly-2020.09.15",
"nightly-2020.09.14",
"nightly-2020.09.13",
"nightly-2020.09.12",
"nightly-2020.09.11",
"nightly-2020.09.10",
"nightly-2020.09.09",
"nightly-2020.09.08",
"nightly-2020.09.07",
"nightly-2020.09.06",
"nightly-2020.09.05",
"nightly-2020.09.04",
"nightly-2020.09.03",
"nightly-2020.09.02",
"nightly-2020.09.01",
"nightly-2020.08.31",
"nightly-2020.08.30",
"nightly-2020.08.29",
"nightly-2020.08.28",
"nightly-2020.08.27",
"nightly-2020.08.26",
"nightly-2020.08.25",
"nightly-2020.08.24",
"nightly-2020.08.23",
"nightly-2020.08.22",
"nightly-2020.08.21",
"nightly-2020.08.20",
"nightly-2020.08.19",
"nightly-2020.08.18",
"nightly-2020.08.17",
"nightly-2020.08.16",
"nightly-2020.08.15",
"nightly-2020.08.14",
"nightly-2020.08.13",
"nightly-2020.08.12",
"nightly-2020.08.11",
"nightly-2020.08.10",
"nightly-2020.08.09",
"nightly-2020.08.08",
"nightly-2020.08.07",
"nightly-2020.08.06",
"nightly-2020.08.05",
"nightly-2020.08.04",
"nightly-2020.08.03",
"nightly-2020.08.02",
"nightly-2020.08.01",
"nightly-2020.07.31",
"nightly-2020.07.30",
"nightly-2020.07.29",
"nightly-2020.07.28",
"nightly-2020.07.27",
"nightly-2020.07.26",
"nightly-2020.07.25",
"nightly-2020.07.24",
"nightly-2020.07.23",
"nightly-2020.07.22",
"nightly-2020.07.21",
"nightly-2020.07.20",
"nightly-2020.07.19",
"nightly-2020.07.18",
"nightly-2020.07.17",
"nightly-2020.07.16",
"nightly-2020.07.15",
"nightly-2020.07.14",
"nightly-2020.07.13",
"nightly-2020.07.12",
"nightly-2020.07.11",
"nightly-2020.07.10",
"nightly-2020.07.09",
"nightly-2020.07.08",
"nightly-2020.07.07",
"nightly-2020.07.06",
"nightly-2020.07.05",
"nightly-2020.07.04",
"nightly-2020.07.03",
"nightly-2020.07.02",
"nightly-2020.07.01",
"nightly-2020.06.30",
"nightly-2020.06.29",
"nightly-2020.06.28",
"nightly-2020.06.27",
"nightly-2020.06.26",
"nightly-2020.06.25",
"HHVM-4.56.1",
"nightly-2020.06.24",
"nightly-2020.06.23",
"nightly-2020.06.22",
"nightly-2020.06.21",
"nightly-2020.06.20",
"nightly-2020.06.19",
"nightly-2020.06.18",
"nightly-2020.06.17",
"nightly-2020.06.16",
"nightly-2020.06.15",
"nightly-2020.06.14",
"nightly-2020.06.13",
"nightly-2020.06.12",
"nightly-2020.06.11",
"nightly-2020.06.10",
"nightly-2020.06.09",
"nightly-2020.06.08",
"nightly-2020.06.07",
"nightly-2020.06.06",
"nightly-2020.06.05",
"nightly-2020.06.04",
"nightly-2020.06.03",
"nightly-2020.06.02",
"nightly-2020.06.01",
"nightly-2020.05.31",
"nightly-2020.05.30",
"nightly-2020.05.29",
"nightly-2020.05.28",
"nightly-2020.05.27",
"nightly-2020.05.26",
"nightly-2020.05.25",
"nightly-2020.05.24",
"nightly-2020.05.23",
"nightly-2020.05.22",
"nightly-2020.05.21",
"nightly-2020.05.20",
"nightly-2020.05.19",
"nightly-2020.05.18",
"nightly-2020.05.17",
"nightly-2020.05.16",
"nightly-2020.05.15",
"nightly-2020.05.14",
"nightly-2020.05.13",
"nightly-2020.05.12",
"nightly-2020.05.11",
"nightly-2020.05.10",
"nightly-2020.05.09",
"nightly-2020.05.08",
"nightly-2020.05.07",
"nightly-2020.05.06",
"nightly-2020.05.05",
"HHVM-4.56.0",
"nightly-2020.05.04",
"nightly-2020.05.03",
"nightly-2020.05.02",
"nightly-2020.05.01",
"nightly-2020.04.30",
"nightly-2020.04.29",
"nightly-2020.04.28",
"nightly-2020.04.27",
"nightly-2020.04.26",
"nightly-2020.04.25",
"nightly-2020.04.24",
"nightly-2020.04.23",
"nightly-2020.04.22",
"nightly-2020.04.21",
"nightly-2020.04.20",
"nightly-2020.04.19",
"nightly-2020.04.18",
"nightly-2020.04.17",
"nightly-2020.04.16",
"nightly-2020.04.15",
"nightly-2020.04.14",
"nightly-2020.04.13",
"nightly-2020.04.12",
"nightly-2020.04.11",
"nightly-2020.04.10",
"nightly-2020.04.09",
"nightly-2020.04.08",
"nightly-2020.04.07",
"nightly-2020.04.06",
"nightly-2020.04.05",
"nightly-2020.04.04",
"nightly-2020.04.03",
"nightly-2020.04.02",
"nightly-2020.04.01",
"nightly-2020.03.31",
"nightly-2020.03.30",
"nightly-2020.03.29",
"nightly-2020.03.28",
"nightly-2020.03.27",
"nightly-2020.03.26",
"nightly-2020.03.25",
"nightly-2020.03.24",
"nightly-2020.03.23",
"nightly-2020.03.22",
"nightly-2020.03.21",
"nightly-2020.03.20",
"nightly-2020.03.19",
"nightly-2020.03.18",
"nightly-2020.03.17",
"nightly-2020.03.16",
"nightly-2020.03.15",
"nightly-2020.03.14",
"nightly-2020.03.13",
"nightly-2020.03.12",
"nightly-2020.03.11",
"nightly-2020.03.10",
"nightly-2020.03.09",
"nightly-2020.03.08",
"nightly-2020.03.07",
"nightly-2020.03.06",
"nightly-2020.03.05",
"nightly-2020.03.04",
"nightly-2020.03.03",
"nightly-2020.03.02",
"nightly-2020.03.01",
"nightly-2020.02.29",
"nightly-2020.02.28",
"nightly-2020.02.27",
"nightly-2020.02.26",
"nightly-2020.02.25",
"nightly-2020.02.24",
"nightly-2020.02.23",
"nightly-2020.02.22",
"nightly-2020.02.21",
"nightly-2020.02.20",
"nightly-2020.02.19",
"nightly-2020.02.18",
"nightly-2020.02.17",
"nightly-2020.02.16",
"nightly-2020.02.15",
"nightly-2020.02.14",
"nightly-2020.02.13",
"nightly-2020.02.12",
"nightly-2020.02.11",
"nightly-2020.02.10",
"nightly-2020.02.09",
"nightly-2020.02.08",
"nightly-2020.02.07",
"nightly-2020.02.06",
"nightly-2020.02.05",
"nightly-2020.02.04",
"nightly-2020.02.03",
"nightly-2020.02.02",
"nightly-2020.02.01",
"nightly-2020.01.31",
"nightly-2020.01.30",
"nightly-2020.01.29",
"nightly-2020.01.28",
"nightly-2020.01.27",
"nightly-2020.01.26",
"nightly-2020.01.25",
"nightly-2020.01.24",
"nightly-2020.01.23",
"nightly-2020.01.22",
"nightly-2020.01.21",
"nightly-2020.01.20",
"nightly-2020.01.19",
"nightly-2020.01.18",
"nightly-2020.01.17",
"nightly-2020.01.16",
"nightly-2020.01.15",
"nightly-2020.01.14",
"nightly-2020.01.13",
"nightly-2020.01.12",
"nightly-2020.01.11",
"nightly-2020.01.10",
"nightly-2020.01.09",
"nightly-2020.01.08",
"nightly-2020.01.07",
"nightly-2020.01.06",
"nightly-2020.01.05",
"nightly-2020.01.04",
"nightly-2020.01.03",
"nightly-2020.01.02",
"nightly-2020.01.01",
"nightly-2019.12.31",
"nightly-2019.12.30",
"nightly-2019.12.29",
"nightly-2019.12.28",
"nightly-2019.12.27",
"nightly-2019.12.26",
"nightly-2019.12.25",
"nightly-2019.12.24",
"nightly-2019.12.23",
"nightly-2019.12.22",
"nightly-2019.12.21",
"nightly-2019.12.20",
"nightly-2019.12.19",
"nightly-2019.12.18",
"nightly-2019.12.17",
"nightly-2019.12.16",
"nightly-2019.12.15",
"nightly-2019.12.14",
"nightly-2019.12.13",
"nightly-2019.12.12",
"nightly-2019.12.11",
"nightly-2019.12.09",
"nightly-2019.12.10",
"nightly-2019.12.08",
"nightly-2019.12.07",
"nightly-2019.12.06",
"nightly-2019.12.05",
"nightly-2019.12.04",
"nightly-2019.12.03",
"nightly-2019.12.02",
"nightly-2019.12.01",
"nightly-2019.11.30",
"nightly-2019.11.29",
"nightly-2019.11.28",
"nightly-2019.11.27",
"nightly-2019.11.26",
"nightly-2019.11.25",
"nightly-2019.11.24",
"nightly-2019.11.23",
"nightly-2019.11.22",
"nightly-2019.11.21",
"nightly-2019.11.20",
"nightly-2019.11.19",
"nightly-2019.11.18",
"nightly-2019.11.17",
"nightly-2019.11.16",
"nightly-2019.11.15",
"nightly-2019.11.14",
"nightly-2019.11.13",
"nightly-2019.11.12",
"nightly-2019.11.11",
"nightly-2019.11.10",
"nightly-2019.11.09",
"nightly-2019.11.08",
"nightly-2019.11.07",
"nightly-2019.11.06",
"nightly-2019.11.05",
"nightly-2019.11.04",
"nightly-2019.11.03",
"nightly-2019.11.02",
"nightly-2019.11.01",
"nightly-2019.10.31",
"nightly-2019.10.30",
"nightly-2019.10.29",
"nightly-2019.10.28",
"nightly-2019.10.27",
"nightly-2019.10.26",
"nightly-2019.10.25",
"nightly-2019.10.24",
"nightly-2019.10.23",
"nightly-2019.10.22",
"nightly-2019.10.21",
"nightly-2019.10.20",
"nightly-2019.10.19",
"nightly-2019.10.18",
"nightly-2019.10.17",
"nightly-2019.10.16",
"nightly-2019.10.15",
"nightly-2019.10.14",
"nightly-2019.10.13",
"nightly-2019.10.12",
"nightly-2019.10.11",
"nightly-2019.10.10",
"nightly-2019.10.09",
"nightly-2019.10.08",
"nightly-2019.10.07",
"nightly-2019.10.06",
"nightly-2019.10.05",
"nightly-2019.10.04",
"nightly-2019.10.03",
"nightly-2019.10.02",
"nightly-2019.10.01",
"nightly-2019.09.30",
"nightly-2019.09.29",
"nightly-2019.09.28",
"nightly-2019.09.27",
"nightly-2019.09.26",
"nightly-2019.09.25",
"nightly-2019.09.24",
"nightly-2019.09.23",
"nightly-2019.09.22",
"nightly-2019.09.21",
"nightly-2019.09.20",
"nightly-2019.09.19",
"nightly-2019.09.18",
"nightly-2019.09.17",
"nightly-2019.09.16",
"nightly-2019.09.15",
"nightly-2019.09.14",
"nightly-2019.09.13",
"nightly-2019.09.12",
"nightly-2019.09.11",
"nightly-2019.09.10",
"nightly-2019.09.09",
"nightly-2019.09.08",
"nightly-2019.09.07",
"nightly-2019.09.06",
"nightly-2019.09.05",
"nightly-2019.09.04",
"nightly-2019.09.03",
"nightly-2019.09.02",
"nightly-2019.09.01",
"nightly-2019.08.31",
"nightly-2019.08.30",
"nightly-2019.08.29",
"nightly-2019.08.28",
"nightly-2019.08.27",
"nightly-2019.08.26",
"nightly-2019.08.25",
"nightly-2019.08.24",
"nightly-2019.08.23",
"nightly-2019.08.22",
"nightly-2019.08.21",
"nightly-2019.08.20",
"nightly-2019.08.19",
"nightly-2019.08.18",
"nightly-2019.08.17",
"nightly-2019.08.16",
"nightly-2019.08.15",
"nightly-2019.08.14",
"nightly-2019.08.13",
"nightly-2019.08.12",
"nightly-2019.08.11",
"nightly-2019.08.10",
"nightly-2019.08.09",
"nightly-2019.08.08",
"nightly-2019.08.07",
"nightly-2019.08.06",
"nightly-2019.08.05",
"nightly-2019.08.04",
"nightly-2019.08.03",
"nightly-2019.08.02",
"nightly-2019.08.01",
"nightly-2019.07.31",
"nightly-2019.07.30",
"nightly-2019.07.29",
"nightly-2019.07.28",
"nightly-2019.07.27",
"nightly-2019.07.26",
"nightly-2019.07.25",
"nightly-2019.07.24",
"nightly-2019.07.23",
"nightly-2019.07.22",
"nightly-2019.07.21",
"nightly-2019.07.20",
"nightly-2019.07.19",
"nightly-2019.07.18",
"nightly-2019.07.17",
"nightly-2019.07.16",
"nightly-2019.07.15",
"nightly-2019.07.14",
"nightly-2019.07.13",
"nightly-2019.07.12",
"nightly-2019.07.11",
"nightly-2019.07.10",
"nightly-2019.07.09",
"nightly-2019.07.08",
"nightly-2019.07.07",
"nightly-2019.07.06",
"nightly-2019.07.05",
"nightly-2019.07.04",
"nightly-2019.07.03",
"nightly-2019.07.02",
"nightly-2019.07.01",
"nightly-2019.06.30",
"nightly-2019.06.29",
"nightly-2019.06.28",
"nightly-2019.06.27",
"nightly-2019.06.26",
"nightly-2019.06.25",
"nightly-2019.06.24",
"nightly-2019.06.23",
"nightly-2019.06.22",
"nightly-2019.06.21",
"nightly-2019.06.20",
"nightly-2019.06.19",
"nightly-2019.06.17",
"nightly-2019.06.18",
"nightly-2019.06.16",
"nightly-2019.06.15",
"nightly-2019.06.14",
"nightly-2019.06.13",
"nightly-2019.06.12",
"nightly-2019.06.11",
"nightly-2019.06.10",
"nightly-2019.06.09",
"nightly-2019.06.08",
"nightly-2019.06.07",
"nightly-2019.06.06",
"nightly-2019.06.05",
"nightly-2019.06.04",
"nightly-2019.06.03",
"nightly-2019.06.02",
"nightly-2019.06.01",
"nightly-2019.05.31",
"nightly-2019.05.30",
"nightly-2019.05.29",
"nightly-2019.05.28",
"nightly-2019.05.27",
"nightly-2019.05.26",
"nightly-2019.05.25",
"nightly-2019.05.24",
"nightly-2019.05.23",
"nightly-2019.05.22",
"nightly-2019.05.21",
"nightly-2019.05.20",
"nightly-2019.05.19",
"nightly-2019.05.18",
"nightly-2019.05.17",
"nightly-2019.05.16",
"nightly-2019.05.15",
"nightly-2019.05.14",
"nightly-2019.05.13",
"nightly-2019.05.12",
"nightly-2019.05.11",
"nightly-2019.05.10",
"nightly-2019.05.09",
"nightly-2019.05.08",
"nightly-2019.05.07",
"nightly-2019.05.06",
"nightly-2019.05.05",
"nightly-2019.05.04",
"nightly-2019.05.03",
"nightly-2019.05.02",
"nightly-2019.05.01",
"nightly-2019.04.30",
"nightly-2019.04.29",
"nightly-2019.04.28",
"nightly-2019.04.27",
"nightly-2019.04.26",
"nightly-2019.04.25",
"nightly-2019.04.24",
"nightly-2019.04.22",
"nightly-2019.04.23",
"nightly-2019.04.21",
"nightly-2019.04.20",
"nightly-2019.04.19",
"nightly-2019.04.18",
"nightly-2019.04.17",
"nightly-2019.04.16",
"nightly-2019.04.15",
"nightly-2019.04.14",
"nightly-2019.04.13",
"nightly-2019.04.12",
"nightly-2019.04.11",
"nightly-2019.04.10",
"nightly-2019.04.09",
"nightly-2019.04.08",
"nightly-2019.04.07",
"nightly-2019.04.06",
"nightly-2019.04.05",
"nightly-2019.04.04",
"nightly-2019.04.03",
"nightly-2019.04.02",
"nightly-2019.04.01",
"nightly-2019.03.31",
"nightly-2019.03.30",
"nightly-2019.03.29",
"nightly-2019.03.28",
"gcc-4.6",
"HPHP-2.1.0",
"src-hphp",
"pre-hhvm"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-3556.json",
"vanir_signatures": [
{
"id": "CVE-2019-3556-4821c8f9",
"digest": {
"threshold": 0.9,
"line_hashes": [
"28589786793399802352507114342322571412",
"304344679621845806645170314187089307619",
"113334605668934533256516010032469343227",
"140335216194151808759673220052749435881"
]
},
"source": "https://github.com/facebook/hhvm/commit/ee529270ee34b45efe3ae71319c96ea0775b2308",
"target": {
"file": "hphp/runtime/version.h"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
}
],
"vanir_signatures_modified": "2026-10-31T07:05:20Z"
}
},
{
"ranges": [
{
"repo": "https://github.com/meta/hhvm",
"type": "GIT",
"events": [
{
"introduced": "0"
},
{
"fixed": "abe0b29e4d3a610f9bc920b8be4ad8403364c2d4"
}
],
"database_specific": {
"extracted_events": [
{
"range": [
{
"fixed": "abe0b29e4d3a610f9bc920b8be4ad8403364c2d4"
}
],
"source": "REFERENCES_COMMIT"
}
]
}
}
],
"versions": [
"nightly-2020.11.12",
"nightly-2020.11.11",
"nightly-2020.11.10",
"nightly-2020.11.09",
"nightly-2020.11.08",
"nightly-2020.11.07",
"nightly-2020.11.06",
"nightly-2020.11.05",
"nightly-2020.11.04",
"nightly-2020.11.03",
"nightly-2020.11.02",
"nightly-2020.11.01",
"nightly-2020.10.31",
"nightly-2020.10.30",
"nightly-2020.10.29",
"nightly-2020.10.28",
"nightly-2020.10.27",
"nightly-2020.10.26",
"nightly-2020.10.25",
"nightly-2020.10.24",
"nightly-2020.10.23",
"nightly-2020.10.22",
"nightly-2020.10.21",
"nightly-2020.10.20",
"nightly-2020.10.19",
"nightly-2020.10.18",
"nightly-2020.10.17",
"nightly-2020.10.16",
"nightly-2020.10.15",
"nightly-2020.10.14",
"nightly-2020.10.13",
"nightly-2020.10.12",
"nightly-2020.10.11",
"nightly-2020.10.10",
"nightly-2020.10.09",
"nightly-2020.10.08",
"nightly-2020.10.07",
"nightly-2020.10.06",
"nightly-2020.10.05",
"nightly-2020.10.04",
"nightly-2020.10.03",
"nightly-2020.10.02",
"nightly-2020.10.01",
"nightly-2020.09.30",
"nightly-2020.09.29",
"nightly-2020.09.28",
"nightly-2020.09.27",
"nightly-2020.09.26",
"nightly-2020.09.25",
"nightly-2020.09.24",
"nightly-2020.09.23",
"nightly-2020.09.22",
"nightly-2020.09.21",
"nightly-2020.09.20",
"nightly-2020.09.19",
"nightly-2020.09.18",
"nightly-2020.09.17",
"nightly-2020.09.16",
"nightly-2020.09.15",
"nightly-2020.09.14",
"nightly-2020.09.13",
"nightly-2020.09.12",
"nightly-2020.09.11",
"nightly-2020.09.10",
"nightly-2020.09.09",
"nightly-2020.09.08",
"nightly-2020.09.07",
"nightly-2020.09.06",
"nightly-2020.09.05",
"nightly-2020.09.04",
"nightly-2020.09.03",
"nightly-2020.09.02",
"nightly-2020.09.01",
"nightly-2020.08.31",
"nightly-2020.08.30",
"nightly-2020.08.29",
"nightly-2020.08.28",
"nightly-2020.08.27",
"nightly-2020.08.26",
"nightly-2020.08.25",
"nightly-2020.08.24",
"nightly-2020.08.23",
"nightly-2020.08.22",
"nightly-2020.08.21",
"nightly-2020.08.20",
"nightly-2020.08.19",
"nightly-2020.08.18",
"nightly-2020.08.17",
"nightly-2020.08.16",
"nightly-2020.08.15",
"nightly-2020.08.14",
"nightly-2020.08.13",
"nightly-2020.08.12",
"nightly-2020.08.11",
"nightly-2020.08.10",
"nightly-2020.08.09",
"nightly-2020.08.08",
"nightly-2020.08.07",
"nightly-2020.08.06",
"nightly-2020.08.05",
"nightly-2020.08.04",
"nightly-2020.08.03",
"nightly-2020.08.02",
"nightly-2020.08.01",
"nightly-2020.07.31",
"nightly-2020.07.30",
"nightly-2020.07.29",
"nightly-2020.07.28",
"nightly-2020.07.27",
"nightly-2020.07.26",
"nightly-2020.07.25",
"nightly-2020.07.24",
"nightly-2020.07.23",
"nightly-2020.07.22",
"nightly-2020.07.21",
"nightly-2020.07.20",
"nightly-2020.07.19",
"nightly-2020.07.18",
"nightly-2020.07.17",
"nightly-2020.07.16",
"nightly-2020.07.15",
"nightly-2020.07.14",
"nightly-2020.07.13",
"nightly-2020.07.12",
"nightly-2020.07.11",
"nightly-2020.07.10",
"nightly-2020.07.09",
"nightly-2020.07.08",
"nightly-2020.07.07",
"nightly-2020.07.06",
"nightly-2020.07.05",
"nightly-2020.07.04",
"nightly-2020.07.03",
"nightly-2020.07.02",
"nightly-2020.07.01",
"nightly-2020.06.30",
"nightly-2020.06.29",
"nightly-2020.06.28",
"nightly-2020.06.27",
"nightly-2020.06.26",
"nightly-2020.06.25",
"nightly-2020.06.24",
"nightly-2020.06.23",
"nightly-2020.06.22",
"nightly-2020.06.21",
"nightly-2020.06.20",
"nightly-2020.06.19",
"nightly-2020.06.18",
"nightly-2020.06.17",
"nightly-2020.06.16",
"nightly-2020.06.15",
"nightly-2020.06.14",
"nightly-2020.06.13",
"nightly-2020.06.12",
"nightly-2020.06.11",
"nightly-2020.06.10",
"nightly-2020.06.09",
"nightly-2020.06.08",
"nightly-2020.06.07",
"nightly-2020.06.06",
"nightly-2020.06.05",
"nightly-2020.06.04",
"nightly-2020.06.03",
"nightly-2020.06.02",
"nightly-2020.06.01",
"nightly-2020.05.31",
"nightly-2020.05.30",
"nightly-2020.05.29",
"nightly-2020.05.28",
"nightly-2020.05.27",
"nightly-2020.05.26",
"nightly-2020.05.25",
"nightly-2020.05.24",
"nightly-2020.05.23",
"nightly-2020.05.22",
"nightly-2020.05.21",
"nightly-2020.05.20",
"nightly-2020.05.19",
"nightly-2020.05.18",
"nightly-2020.05.17",
"nightly-2020.05.16",
"nightly-2020.05.15",
"nightly-2020.05.14",
"nightly-2020.05.13",
"nightly-2020.05.12",
"nightly-2020.05.11",
"nightly-2020.05.10",
"nightly-2020.05.09",
"nightly-2020.05.08",
"nightly-2020.05.07",
"nightly-2020.05.06",
"nightly-2020.05.05",
"nightly-2020.05.04",
"nightly-2020.05.03",
"nightly-2020.05.02",
"nightly-2020.05.01",
"nightly-2020.04.30",
"nightly-2020.04.29",
"nightly-2020.04.28",
"nightly-2020.04.27",
"nightly-2020.04.26",
"nightly-2020.04.25",
"nightly-2020.04.24",
"nightly-2020.04.23",
"nightly-2020.04.22",
"nightly-2020.04.21",
"nightly-2020.04.20",
"nightly-2020.04.19",
"nightly-2020.04.18",
"nightly-2020.04.17",
"nightly-2020.04.16",
"nightly-2020.04.15",
"nightly-2020.04.14",
"nightly-2020.04.13",
"nightly-2020.04.12",
"nightly-2020.04.11",
"nightly-2020.04.10",
"nightly-2020.04.09",
"nightly-2020.04.08",
"nightly-2020.04.07",
"nightly-2020.04.06",
"nightly-2020.04.05",
"nightly-2020.04.04",
"nightly-2020.04.03",
"nightly-2020.04.02",
"nightly-2020.04.01",
"nightly-2020.03.31",
"nightly-2020.03.30",
"nightly-2020.03.29",
"nightly-2020.03.28",
"nightly-2020.03.27",
"nightly-2020.03.26",
"nightly-2020.03.25",
"nightly-2020.03.24",
"nightly-2020.03.23",
"nightly-2020.03.22",
"nightly-2020.03.21",
"nightly-2020.03.20",
"nightly-2020.03.19",
"nightly-2020.03.18",
"nightly-2020.03.17",
"nightly-2020.03.16",
"nightly-2020.03.15",
"nightly-2020.03.14",
"nightly-2020.03.13",
"nightly-2020.03.12",
"nightly-2020.03.11",
"nightly-2020.03.10",
"nightly-2020.03.09",
"nightly-2020.03.08",
"nightly-2020.03.07",
"nightly-2020.03.06",
"nightly-2020.03.05",
"nightly-2020.03.04",
"nightly-2020.03.03",
"nightly-2020.03.02",
"nightly-2020.03.01",
"nightly-2020.02.29",
"nightly-2020.02.28",
"nightly-2020.02.27",
"nightly-2020.02.26",
"nightly-2020.02.25",
"nightly-2020.02.24",
"nightly-2020.02.23",
"nightly-2020.02.22",
"nightly-2020.02.21",
"nightly-2020.02.20",
"nightly-2020.02.19",
"nightly-2020.02.18",
"nightly-2020.02.17",
"nightly-2020.02.16",
"nightly-2020.02.15",
"nightly-2020.02.14",
"nightly-2020.02.13",
"nightly-2020.02.12",
"nightly-2020.02.11",
"nightly-2020.02.10",
"nightly-2020.02.09",
"nightly-2020.02.08",
"nightly-2020.02.07",
"nightly-2020.02.06",
"nightly-2020.02.05",
"nightly-2020.02.04",
"nightly-2020.02.03",
"nightly-2020.02.02",
"nightly-2020.02.01",
"nightly-2020.01.31",
"nightly-2020.01.30",
"nightly-2020.01.29",
"nightly-2020.01.28",
"nightly-2020.01.27",
"nightly-2020.01.26",
"nightly-2020.01.25",
"nightly-2020.01.24",
"nightly-2020.01.23",
"nightly-2020.01.22",
"nightly-2020.01.21",
"nightly-2020.01.20",
"nightly-2020.01.19",
"nightly-2020.01.18",
"nightly-2020.01.17",
"nightly-2020.01.16",
"nightly-2020.01.15",
"nightly-2020.01.14",
"nightly-2020.01.13",
"nightly-2020.01.12",
"nightly-2020.01.11",
"nightly-2020.01.10",
"nightly-2020.01.09",
"nightly-2020.01.08",
"nightly-2020.01.07",
"nightly-2020.01.06",
"nightly-2020.01.05",
"nightly-2020.01.04",
"nightly-2020.01.03",
"nightly-2020.01.02",
"nightly-2020.01.01",
"nightly-2019.12.31",
"nightly-2019.12.30",
"nightly-2019.12.29",
"nightly-2019.12.28",
"nightly-2019.12.27",
"nightly-2019.12.26",
"nightly-2019.12.25",
"nightly-2019.12.24",
"nightly-2019.12.23",
"nightly-2019.12.22",
"nightly-2019.12.21",
"nightly-2019.12.20",
"nightly-2019.12.19",
"nightly-2019.12.18",
"nightly-2019.12.17",
"nightly-2019.12.16",
"nightly-2019.12.15",
"nightly-2019.12.14",
"nightly-2019.12.13",
"nightly-2019.12.12",
"nightly-2019.12.11",
"nightly-2019.12.09",
"nightly-2019.12.10",
"nightly-2019.12.08",
"nightly-2019.12.07",
"nightly-2019.12.06",
"nightly-2019.12.05",
"nightly-2019.12.04",
"nightly-2019.12.03",
"nightly-2019.12.02",
"nightly-2019.12.01",
"nightly-2019.11.30",
"nightly-2019.11.29",
"nightly-2019.11.28",
"nightly-2019.11.27",
"nightly-2019.11.26",
"nightly-2019.11.25",
"nightly-2019.11.24",
"nightly-2019.11.23",
"nightly-2019.11.22",
"nightly-2019.11.21",
"nightly-2019.11.20",
"nightly-2019.11.19",
"nightly-2019.11.18",
"nightly-2019.11.17",
"nightly-2019.11.16",
"nightly-2019.11.15",
"nightly-2019.11.14",
"nightly-2019.11.13",
"nightly-2019.11.12",
"nightly-2019.11.11",
"nightly-2019.11.10",
"nightly-2019.11.09",
"nightly-2019.11.08",
"nightly-2019.11.07",
"nightly-2019.11.06",
"nightly-2019.11.05",
"nightly-2019.11.04",
"nightly-2019.11.03",
"nightly-2019.11.02",
"nightly-2019.11.01",
"nightly-2019.10.31",
"nightly-2019.10.30",
"nightly-2019.10.29",
"nightly-2019.10.28",
"nightly-2019.10.27",
"nightly-2019.10.26",
"nightly-2019.10.25",
"nightly-2019.10.24",
"nightly-2019.10.23",
"nightly-2019.10.22",
"nightly-2019.10.21",
"nightly-2019.10.20",
"nightly-2019.10.19",
"nightly-2019.10.18",
"nightly-2019.10.17",
"nightly-2019.10.16",
"nightly-2019.10.15",
"nightly-2019.10.14",
"nightly-2019.10.13",
"nightly-2019.10.12",
"nightly-2019.10.11",
"nightly-2019.10.10",
"nightly-2019.10.09",
"nightly-2019.10.08",
"nightly-2019.10.07",
"nightly-2019.10.06",
"nightly-2019.10.05",
"nightly-2019.10.04",
"nightly-2019.10.03",
"nightly-2019.10.02",
"nightly-2019.10.01",
"nightly-2019.09.30",
"nightly-2019.09.29",
"nightly-2019.09.28",
"nightly-2019.09.27",
"nightly-2019.09.26",
"nightly-2019.09.25",
"nightly-2019.09.24",
"nightly-2019.09.23",
"nightly-2019.09.22",
"nightly-2019.09.21",
"nightly-2019.09.20",
"nightly-2019.09.19",
"nightly-2019.09.18",
"nightly-2019.09.17",
"nightly-2019.09.16",
"nightly-2019.09.15",
"nightly-2019.09.14",
"nightly-2019.09.13",
"nightly-2019.09.12",
"nightly-2019.09.11",
"nightly-2019.09.10",
"nightly-2019.09.09",
"nightly-2019.09.08",
"nightly-2019.09.07",
"nightly-2019.09.06",
"nightly-2019.09.05",
"nightly-2019.09.04",
"nightly-2019.09.03",
"nightly-2019.09.02",
"nightly-2019.09.01",
"nightly-2019.08.31",
"nightly-2019.08.30",
"nightly-2019.08.29",
"nightly-2019.08.28",
"nightly-2019.08.27",
"nightly-2019.08.26",
"nightly-2019.08.25",
"nightly-2019.08.24",
"nightly-2019.08.23",
"nightly-2019.08.22",
"nightly-2019.08.21",
"nightly-2019.08.20",
"nightly-2019.08.19",
"nightly-2019.08.18",
"nightly-2019.08.17",
"nightly-2019.08.16",
"nightly-2019.08.15",
"nightly-2019.08.14",
"nightly-2019.08.13",
"nightly-2019.08.12",
"nightly-2019.08.11",
"nightly-2019.08.10",
"nightly-2019.08.09",
"nightly-2019.08.08",
"nightly-2019.08.07",
"nightly-2019.08.06",
"nightly-2019.08.05",
"nightly-2019.08.04",
"nightly-2019.08.03",
"nightly-2019.08.02",
"nightly-2019.08.01",
"nightly-2019.07.31",
"nightly-2019.07.30",
"nightly-2019.07.29",
"nightly-2019.07.28",
"nightly-2019.07.27",
"nightly-2019.07.26",
"nightly-2019.07.25",
"nightly-2019.07.24",
"nightly-2019.07.23",
"nightly-2019.07.22",
"nightly-2019.07.21",
"nightly-2019.07.20",
"nightly-2019.07.19",
"nightly-2019.07.18",
"nightly-2019.07.17",
"nightly-2019.07.16",
"nightly-2019.07.15",
"nightly-2019.07.14",
"nightly-2019.07.13",
"nightly-2019.07.12",
"nightly-2019.07.11",
"nightly-2019.07.10",
"nightly-2019.07.09",
"nightly-2019.07.08",
"nightly-2019.07.07",
"nightly-2019.07.06",
"nightly-2019.07.05",
"nightly-2019.07.04",
"nightly-2019.07.03",
"nightly-2019.07.02",
"nightly-2019.07.01",
"nightly-2019.06.30",
"nightly-2019.06.29",
"nightly-2019.06.28",
"nightly-2019.06.27",
"nightly-2019.06.26",
"nightly-2019.06.25",
"nightly-2019.06.24",
"nightly-2019.06.23",
"nightly-2019.06.22",
"nightly-2019.06.21",
"nightly-2019.06.20",
"nightly-2019.06.19",
"nightly-2019.06.17",
"nightly-2019.06.18",
"nightly-2019.06.16",
"nightly-2019.06.15",
"nightly-2019.06.14",
"nightly-2019.06.13",
"nightly-2019.06.12",
"nightly-2019.06.11",
"nightly-2019.06.10",
"nightly-2019.06.09",
"nightly-2019.06.08",
"nightly-2019.06.07",
"nightly-2019.06.06",
"nightly-2019.06.05",
"nightly-2019.06.04",
"nightly-2019.06.03",
"nightly-2019.06.02",
"nightly-2019.06.01",
"nightly-2019.05.31",
"nightly-2019.05.30",
"nightly-2019.05.29",
"nightly-2019.05.28",
"nightly-2019.05.27",
"nightly-2019.05.26",
"nightly-2019.05.25",
"nightly-2019.05.24",
"nightly-2019.05.23",
"nightly-2019.05.22",
"nightly-2019.05.21",
"nightly-2019.05.20",
"nightly-2019.05.19",
"nightly-2019.05.18",
"nightly-2019.05.17",
"nightly-2019.05.16",
"nightly-2019.05.15",
"nightly-2019.05.14",
"nightly-2019.05.13",
"nightly-2019.05.12",
"nightly-2019.05.11",
"nightly-2019.05.10",
"nightly-2019.05.09",
"nightly-2019.05.08",
"nightly-2019.05.07",
"nightly-2019.05.06",
"nightly-2019.05.05",
"nightly-2019.05.04",
"nightly-2019.05.03",
"nightly-2019.05.02",
"nightly-2019.05.01",
"nightly-2019.04.30",
"nightly-2019.04.29",
"nightly-2019.04.28",
"nightly-2019.04.27",
"nightly-2019.04.26",
"nightly-2019.04.25",
"nightly-2019.04.24",
"nightly-2019.04.22",
"nightly-2019.04.23",
"nightly-2019.04.21",
"nightly-2019.04.20",
"nightly-2019.04.19",
"nightly-2019.04.18",
"nightly-2019.04.17",
"nightly-2019.04.16",
"nightly-2019.04.15",
"nightly-2019.04.14",
"nightly-2019.04.13",
"nightly-2019.04.12",
"nightly-2019.04.11",
"nightly-2019.04.10",
"nightly-2019.04.09",
"nightly-2019.04.08",
"nightly-2019.04.07",
"nightly-2019.04.06",
"nightly-2019.04.05",
"nightly-2019.04.04",
"nightly-2019.04.03",
"nightly-2019.04.02",
"nightly-2019.04.01",
"nightly-2019.03.31",
"nightly-2019.03.30",
"nightly-2019.03.29",
"nightly-2019.03.28",
"gcc-4.6",
"HPHP-2.1.0",
"src-hphp",
"pre-hhvm"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-3556.json",
"vanir_signatures": [
{
"id": "CVE-2019-3556-00563c89",
"digest": {
"threshold": 0.9,
"line_hashes": [
"36956090015315603017141730089953471639",
"46108539517113444196044381480482401829",
"285529554748387993144151444026503425585",
"95757993391105962874379486527881175395",
"279909141059809553946753373743161011402",
"222644702114683983152330080470903522342"
]
},
"source": "https://github.com/meta/hhvm/commit/abe0b29e4d3a610f9bc920b8be4ad8403364c2d4",
"target": {
"file": "hphp/runtime/base/preg.h"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2019-3556-11c83225",
"digest": {
"length": 505,
"function_hash": "141690697493115597784134103222268311965"
},
"source": "https://github.com/meta/hhvm/commit/abe0b29e4d3a610f9bc920b8be4ad8403364c2d4",
"target": {
"file": "hphp/runtime/base/preg.cpp",
"function": "PCRECache::dump"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2019-3556-130b2f04",
"digest": {
"length": 1026,
"function_hash": "32315142391097408383139198570496751782"
},
"source": "https://github.com/meta/hhvm/commit/abe0b29e4d3a610f9bc920b8be4ad8403364c2d4",
"target": {
"file": "hphp/zend/zend-string.cpp",
"function": "string_crypt"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2019-3556-1bab7f39",
"digest": {
"length": 776,
"function_hash": "160469826899761946032830380296828123408"
},
"source": "https://github.com/meta/hhvm/commit/abe0b29e4d3a610f9bc920b8be4ad8403364c2d4",
"target": {
"file": "hphp/runtime/ext/xmlreader/ext_xmlreader.cpp",
"function": "HHVM_METHOD"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2019-3556-2374224b",
"digest": {
"length": 73,
"function_hash": "128635506455363568584529033795189545169"
},
"source": "https://github.com/meta/hhvm/commit/abe0b29e4d3a610f9bc920b8be4ad8403364c2d4",
"target": {
"file": "hphp/runtime/base/preg.cpp",
"function": "pcre_dump_cache"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2019-3556-2e8d31d9",
"digest": {
"length": 1066,
"function_hash": "291692884138443403556866798857962114658"
},
"source": "https://github.com/meta/hhvm/commit/abe0b29e4d3a610f9bc920b8be4ad8403364c2d4",
"target": {
"file": "hphp/runtime/ext/ldap/ext_ldap.cpp",
"function": "HHVM_FUNCTION"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2019-3556-35657bd2",
"digest": {
"threshold": 0.9,
"line_hashes": [
"133133990269620441931601076727088208036",
"33451550003600826786761444827757739900",
"72318699131460137554481801561383294548",
"127575323953097060510672454560651395208",
"98556166875678876059390389437878699431"
]
},
"source": "https://github.com/meta/hhvm/commit/abe0b29e4d3a610f9bc920b8be4ad8403364c2d4",
"target": {
"file": "hphp/runtime/ext/gd/libgd/gd.cpp"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2019-3556-367a603e",
"digest": {
"length": 439,
"function_hash": "210275169280058316452295708979501353606"
},
"source": "https://github.com/meta/hhvm/commit/abe0b29e4d3a610f9bc920b8be4ad8403364c2d4",
"target": {
"file": "hphp/util/light-process.cpp",
"function": "do_change_user"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2019-3556-3751d2e8",
"digest": {
"length": 357,
"function_hash": "275941699024587600509015722083562254359"
},
"source": "https://github.com/meta/hhvm/commit/abe0b29e4d3a610f9bc920b8be4ad8403364c2d4",
"target": {
"file": "hphp/runtime/base/string-util.cpp",
"function": "StringUtil::Crypt"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2019-3556-3c6cb5f9",
"digest": {
"threshold": 0.9,
"line_hashes": [
"51001310750640145119218617241128215547",
"78056449833029906572124340700118762640",
"177425561368267329750379552618676606912",
"161160344212673577255587524586160946192",
"156715336778501878335361155674395202537",
"322015272536699240351359536712656463333",
"157339035177529793088941555175560421197",
"324205823850653789752628339716863510664"
]
},
"source": "https://github.com/meta/hhvm/commit/abe0b29e4d3a610f9bc920b8be4ad8403364c2d4",
"target": {
"file": "hphp/runtime/ext/xmlreader/ext_xmlreader.cpp"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2019-3556-58bcf94b",
"digest": {
"threshold": 0.9,
"line_hashes": [
"215668176756032931027443423984043464779",
"110843257751995697653975292145457031502",
"105815747251620859876177055909492952152",
"278219377990536847456801313924976805991",
"63918414930222345389271107157402297818",
"148866067944859151196776827743401414205",
"301863773670211270415550334285158739551",
"223089364518266010443786248749648563949",
"113532459417378750624453542556016058460",
"92664851771472992350272767684091996858",
"35435994434138394687317743775815047271",
"214148354504740524502862634943579521838",
"157922644326472591735980321141239831346",
"112065292815752692825421818003275904970",
"163475572636105789197204946265608522870",
"210526957247834183407598186090457924925",
"270530371589062420661448674334573942490",
"333319166371103717938224280564414912177",
"179855490062453847667244565705745427334",
"72586592103313927761423837911020494567",
"304241042268196883799333326745318345413",
"171994925688116974779693601808575114925",
"150441543242860013778956958757751332012",
"212251140865296008892322361899220172466",
"211405675831202126794840983439222652417",
"219838268974882931959005213476394383759",
"228200821063404197946329299273370677871",
"257544992021463746813414686023971197350",
"170282015193837413568097197997627939393",
"313318621160984465599265410528160573136",
"319293048894371409245553327354088026866"
]
},
"source": "https://github.com/meta/hhvm/commit/abe0b29e4d3a610f9bc920b8be4ad8403364c2d4",
"target": {
"file": "hphp/runtime/server/admin-request-handler.cpp"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2019-3556-6927a1d0",
"digest": {
"threshold": 0.9,
"line_hashes": [
"107687481536417448823291068589799015071",
"69982210057059821548528228275127378258",
"198637955553749850684722500119168394023",
"338072890056362845985944150437161544810",
"127068174196052780959638939249628543218",
"294172404112476854756369650541535926493",
"271245107185950204020981110325041997979",
"109471751514030751056516505359911955419",
"21072984271207229276513245769172381970",
"63501944882734345342504606663967318246",
"105533043894144925862406501185260165926",
"219009430254836558242724939066245736376",
"32471999539746917184559537684063349181",
"77147949202207580158759164210199812787",
"217116797857328665720367537553226959825",
"187390400581312820850543241573290462996",
"206453790101751500523077322960474847907",
"257719742402946337479556951940827898789",
"40852789804335017178984256223726035676",
"34744683402240276451209631426060565779",
"172572521693954626916528770019528746116",
"152113751342323528145009810712275575016",
"191933700493712784589976270733783494162",
"33728178739004986832189929323540312355",
"18674323550594163514992874909756316669",
"12433677548103069598821337327127774160",
"147755252939738428553775747392870500673",
"221040499059921647307259877666274364380",
"328399668681233477568764616250435626843",
"65299917696952684662391254484468053329"
]
},
"source": "https://github.com/meta/hhvm/commit/abe0b29e4d3a610f9bc920b8be4ad8403364c2d4",
"target": {
"file": "hphp/runtime/base/preg.cpp"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2019-3556-87eaf80f",
"digest": {
"length": 658,
"function_hash": "117515758510859782512496948006273067755"
},
"source": "https://github.com/meta/hhvm/commit/abe0b29e4d3a610f9bc920b8be4ad8403364c2d4",
"target": {
"file": "hphp/runtime/server/admin-request-handler.cpp",
"function": "AdminRequestHandler::handleDumpStaticStringsRequest"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2019-3556-99642091",
"digest": {
"threshold": 0.9,
"line_hashes": [
"13256810394560000746740672437856290318",
"7916080787635857232121587362895192014",
"122861357710270454488169248264177681480"
]
},
"source": "https://github.com/meta/hhvm/commit/abe0b29e4d3a610f9bc920b8be4ad8403364c2d4",
"target": {
"file": "hphp/util/light-process.h"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2019-3556-a0e2acc2",
"digest": {
"threshold": 0.9,
"line_hashes": [
"1793073766555469182942809493908636688",
"32755577242573893587887539207297385257",
"313910954100440453697345401198147500265",
"334417825899089000540822912194129992618"
]
},
"source": "https://github.com/meta/hhvm/commit/abe0b29e4d3a610f9bc920b8be4ad8403364c2d4",
"target": {
"file": "hphp/runtime/base/string-util.cpp"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2019-3556-a633e158",
"digest": {
"length": 1522,
"function_hash": "1857107912704393790624450238173933774"
},
"source": "https://github.com/meta/hhvm/commit/abe0b29e4d3a610f9bc920b8be4ad8403364c2d4",
"target": {
"file": "hphp/runtime/ext/gd/libgd/gd.cpp",
"function": "gdImageCreateTrueColor"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2019-3556-aecfd733",
"digest": {
"threshold": 0.9,
"line_hashes": [
"285307860804117296888475649272925383037",
"203140963140904758479303120912283789543",
"305971096830541567448209745483743876345",
"99087380231718981607408730419908837636",
"198442010505411655884685340383906509713",
"96574425334543627276230682454657178350",
"108234542512787891092982153958868934633",
"245466882000976464873518007985424594879",
"99710510706054418013678794616919852401",
"50830344810693748873405267658212530743",
"156640315850576854551657747447719459117",
"16268486499559022161171190776864309660",
"170161303246116206458985432406086441005"
]
},
"source": "https://github.com/meta/hhvm/commit/abe0b29e4d3a610f9bc920b8be4ad8403364c2d4",
"target": {
"file": "hphp/zend/zend-string.cpp"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2019-3556-b1f0e243",
"digest": {
"threshold": 0.9,
"line_hashes": [
"336594479859397113917263131919658546339",
"246187896042649276162794578932354389789",
"169905785816511821689786995722163931251",
"182404583683536765622541642402193096007",
"161276781042250450362225560849487743297"
]
},
"source": "https://github.com/meta/hhvm/commit/abe0b29e4d3a610f9bc920b8be4ad8403364c2d4",
"target": {
"file": "hphp/zend/crypt-blowfish.cpp"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2019-3556-bbed56da",
"digest": {
"threshold": 0.9,
"line_hashes": [
"328769473553441248613162905715291591864",
"120481257849985986449240125362173557472",
"243417452934957518609290219156289488360",
"254157856435306279685707401947233667091",
"268887195265540793255768295014883514495",
"272243386757027999421563719416103199372",
"279333701603258864656433436343087072789",
"139517654840667491787661872558587041318",
"307307323387413010999661907504280234363",
"200546423623476840162547150627518205231",
"93207636470684901049904820363453873098",
"163576639998042084370541882343016989449",
"331851349351708720922416324967230473014",
"169223595922074710528794269501580630185",
"97906430830768358989964843249259497199",
"314996172691647860438955402719703094146"
]
},
"source": "https://github.com/meta/hhvm/commit/abe0b29e4d3a610f9bc920b8be4ad8403364c2d4",
"target": {
"file": "hphp/runtime/base/runtime-option.cpp"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2019-3556-bf2f54bd",
"digest": {
"length": 3214,
"function_hash": "48151238394374505866032213935737154626"
},
"source": "https://github.com/meta/hhvm/commit/abe0b29e4d3a610f9bc920b8be4ad8403364c2d4",
"target": {
"file": "hphp/zend/crypt-blowfish.cpp",
"function": "BF_crypt"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2019-3556-c64df7cb",
"digest": {
"length": 23944,
"function_hash": "200814695898816512142257541460696318322"
},
"source": "https://github.com/meta/hhvm/commit/abe0b29e4d3a610f9bc920b8be4ad8403364c2d4",
"target": {
"file": "hphp/runtime/server/admin-request-handler.cpp",
"function": "AdminRequestHandler::handleRequest"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2019-3556-c6ef1588",
"digest": {
"threshold": 0.9,
"line_hashes": [
"60364244777355772386698881230823267842",
"165166594758250700767704707346439579075",
"69913749781242406406180725924867127315",
"172397043813504108647050187347398086944",
"82316755028964617845333724473144500920",
"185058460107310527586016199092572513256",
"203112486371261279816640313349378502108",
"44297471342902903899149510898537974633"
]
},
"source": "https://github.com/meta/hhvm/commit/abe0b29e4d3a610f9bc920b8be4ad8403364c2d4",
"target": {
"file": "hphp/runtime/server/admin-request-handler.h"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2019-3556-d083a5bc",
"digest": {
"threshold": 0.9,
"line_hashes": [
"108081873869946675601317064931170347298",
"58181243662334894874393775723671006129",
"131590539913466560493344430516858171120",
"180075591739058228336205742578146353466"
]
},
"source": "https://github.com/meta/hhvm/commit/abe0b29e4d3a610f9bc920b8be4ad8403364c2d4",
"target": {
"file": "hphp/runtime/ext/domdocument/ext_domdocument.h"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2019-3556-d1f4ea32",
"digest": {
"threshold": 0.9,
"line_hashes": [
"132302892312948806749643493054127692338",
"144544364579782948276482057326356876545",
"251381907063100539551610120719393741884"
]
},
"source": "https://github.com/meta/hhvm/commit/abe0b29e4d3a610f9bc920b8be4ad8403364c2d4",
"target": {
"file": "hphp/runtime/base/runtime-option.h"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2019-3556-f11a2348",
"digest": {
"threshold": 0.9,
"line_hashes": [
"153300239319936645071886966036675704684",
"295904806967669368280944968971657809673",
"99133765804485045964521025334947039974",
"27638213683456027787784732021170501676",
"232899773815313318758223297449279710037",
"330492711637862273934584752513218455774",
"262052390326210208228353396764835323710",
"313728593756853567858467237598442512013",
"289602277122483461653262266133022845290",
"326024619064313388084882947918828063519",
"113013651368049508217712015126050111222",
"245024909404068567492141187432852991340",
"83783585964181254825343372950460196501",
"304715653248917398306495114447308687997",
"79957104101863333676120170936846531956",
"244625954361826096982381277199443765665",
"213742986222750926783507072284074984951",
"11512607156191155297697654043081255063",
"227502945880095007457971197159933878389",
"14220062232966461595945741712164448990",
"334711697991821347002431115270269041484",
"133667084158002356528098093311958931710",
"338739794592853516811355334627181684836",
"300560892279042939919704171831910480647"
]
},
"source": "https://github.com/meta/hhvm/commit/abe0b29e4d3a610f9bc920b8be4ad8403364c2d4",
"target": {
"file": "hphp/util/light-process.cpp"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2019-3556-fcf54862",
"digest": {
"threshold": 0.9,
"line_hashes": [
"46232892469802242532894149464515063868",
"109498395471905747547346822559054342238",
"116069554465826252841053201067559388729",
"247971463080932680607418900398944948319"
]
},
"source": "https://github.com/meta/hhvm/commit/abe0b29e4d3a610f9bc920b8be4ad8403364c2d4",
"target": {
"file": "hphp/runtime/ext/ldap/ext_ldap.cpp"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
}
],
"vanir_signatures_modified": "2026-10-31T07:05:20Z"
}
}
],
"modified": "2026-10-31T07:05:20.715067072Z",
"provider": "osv",
"references": [
"https://hhvm.com/blog/2020/11/12/security-update.html",
"https://www.facebook.com/security/advisories/cve-2019-3556",
"https://github.com/facebook/hhvm/commit/abe0b29e4d3a610f9bc920b8be4ad8403364c2d4"
],
"provider_metadata": {}
},
"related_cves": [
{
"value": "CVE-2019-3556",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 388252,
"published_at": "2021-10-26T20:15:07.603+00:00"
}