{
  "affected": [
    {
      "ranges": [
        {
          "database_specific": {
            "versions": [
              {
                "introduced": "2017.12.11.00"
              },
              {
                "last_affected": "2018.08.09.00"
              }
            ]
          },
          "events": [
            {
              "introduced": "712b8b8de747960ceeceedfd3a18ee23a0c03a80"
            },
            {
              "last_affected": "c4fca6d0852bc68b1387c755be7a22710af70cb3"
            },
            {
              "fixed": "8e927ee48b114c8a2f90d0cbd5ac753795a6761f"
            }
          ],
          "repo": "https://github.com/facebook/folly",
          "type": "GIT"
        },
        {
          "database_specific": {
            "versions": [
              {
                "introduced": "3.26"
              },
              {
                "fixed": "3.26.3"
              }
            ]
          },
          "events": [
            {
              "introduced": "a20c2a7761b782faf1635dfe2f1f8f0df438196d"
            },
            {
              "fixed": "cea63133cb066ebff74f9fc42789fa2017beab55"
            },
            {
              "fixed": "e2d10a1e32d01f71aaadd81169bcb9ae86c5d6b8"
            }
          ],
          "repo": "https://github.com/facebook/hhvm",
          "type": "GIT"
        }
      ]
    }
  ],
  "details": "folly::secureRandom will re-use a buffer between parent and child processes when fork() is called. That will result in multiple forked children producing repeat (or similar) results. This affects HHVM 3.26 prior to 3.26.3 and the folly library between v2017.12.11.00 and v2018.08.09.00.",
  "id": "CVE-2018-6337",
  "modified": "2026-03-13T21:48:06.080597056Z",
  "published": "2018-12-31T22:29:00.247Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://hhvm.com/blog/2018/05/24/hhvm-3.26.3.html"
    },
    {
      "type": "FIX",
      "url": "https://github.com/facebook/folly/commit/8e927ee48b114c8a2f90d0cbd5ac753795a6761f"
    },
    {
      "type": "FIX",
      "url": "https://github.com/facebook/hhvm/commit/e2d10a1e32d01f71aaadd81169bcb9ae86c5d6b8"
    }
  ],
  "severity": [
    {
      "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
      "type": "CVSS_V3"
    }
  ]
}