VYPR
← All advisories
High severity7.5NVD Advisory· Published Dec 31, 2018· Updated Jun 17, 2026

CVE-2018-6337

CVE-2018-6337

Description

folly::secureRandom will re-use a buffer between parent and child processes when fork() is called. That will result in multiple forked children producing repeat (or similar) results. This affects HHVM 3.26 prior to 3.26.3 and the folly library between v2017.12.11.00 and v2018.08.09.00.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

6
  • Facebook/folly3 versions
    cpe:2.3:a:facebook:folly:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:facebook:folly:*:*:*:*:*:*:*:*range: >=2017.12.11.00,<=2018.08.09.00
    • (no CPE)range: v2017.12.11.00-v2018.08.09.00
    • (no CPE)range: v2018.08.09.00
  • Facebook/Hhvm3 versions
    cpe:2.3:a:facebook:hhvm:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:facebook:hhvm:*:*:*:*:*:*:*:*range: >=3.26,<3.26.3
    • (no CPE)range: <3.26.3
    • (no CPE)range: 3.26.3

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.