CVE-2014-5386

The mcrypt_create_iv function in hphp/runtime/ext/mcrypt/ext_mcrypt.cpp in Facebook HipHop Virtual Machine (HHVM) before 3.3.0 does not seed the random number…

published December 28, 2014

CVSS
—
EPSS
2%
Percentile
74.3
In the wild
Unconfirmed
What it is

The mcrypt_create_iv function in hphp/runtime/ext/mcrypt/ext_mcrypt.cpp in Facebook HipHop Virtual Machine (HHVM) before 3.3.0 does not seed the random number generator, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by leveraging the use of a single initialization vector.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01516 · 74.3th percentile
Published
2014-12-28T15:00Z
EPSS history
Timeline
  • 28 DEC 15:00Z
    The mcrypt_create_iv function in hphp/runtime/ext/mcrypt/ext_mcrypt.cpp in Facebook HipHop Virtual Machine (HHVM) before 3.3.0 does not seed the random number…
    cvelistv5