NVD

Id
33069  
Name
CVE-2014-5386  
Description
The mcrypt_create_iv function in hphp/runtime/ext/mcrypt/ext_mcrypt.cpp in Facebook HipHop Virtual Machine (HHVM) before 3.3.0 does not seed the random number generator, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by leveraging the use of a single initialization vector.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2014-12-28  
Modified Date
2014-12-30  
Seq
2014-5386  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
173503 33069 CVE-2014-5386 https://github.com/facebook/hhvm/commit/ab6fdeb84fb090b48606b6f7933028cfe7bf3a5e  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
18552 JVNDB-2014-007427 Facebook HipHop Virtual Machine の hphp/runtime/ext/mcrypt/ext_mcrypt.cpp の mcrypt_create_iv 関数における暗号保護メカニズムを破られる脆弱性 Facebook HipHop Virtual Machine (HHVM) の hphp/runtime/ext/mcrypt/ext_mcrypt.cpp の mcrypt_create_iv 関数は、乱数生成器をシードしないため、暗号保護メカニズムを破られる脆弱性が存在します。 CVE-2014-5386 72675 CVE-2014-5386 33069 5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-007427.html 2014-08-16 2015-01-06 View