CVE Catalog

CVE-2016-6875

Critical
Published: Translated: NVD NIST

Summary

In Facebook's HHVM versions before 3.15.0, there is an infinite recursion in wddx, allowing attackers to have unspecified impact via unknown vectors.

Risk Assessment

This vulnerability may lead to serious performance or stability issues, potentially affecting service availability.

Recommendation

It is recommended to upgrade HHVM to version 3.15.0 or newer to mitigate this vulnerability.

Original NVD description (English source)

Infinite recursion in wddx in Facebook HHVM before 3.15.0 allows attackers to have unspecified impact via unknown vectors.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS