PT-2017-2597

CVE-2017-9119

·

تاريخ النشر

2017-05-21

·

تاريخ التحديث

2022-03-03

الوصف من

CVSS 3.1
9.8
حرجة
المقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions PHP version 7.1.5
Description The issue is related to the i zval ptr dtor function in Zend/zend variables.h, which allows attackers to cause a denial of service (memory consumption and application crash) or possibly have unspecified other impact by triggering crafted operations on array data structures. This can lead to memory consumption and application crash when specially crafted commands are executed on array data structures.
Recommendations For PHP version 7.1.5, consider updating to a newer version to mitigate the risk, as the current version allows for denial of service and potential other impacts due to the i zval ptr dtor function issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
قابلية الاستغلال
استغلال
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
تصنيف نقاط الضعف
المعرّفات ذات الصلة
ALT-PU-2017-1707
USN-5300-1
USN-5300-2
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾