PT-2017-2597

CVE-2017-9119

·

Publicado

2017-05-21

·

Atualizado

2022-03-03

Descrição por

CVSS 3.1
9.8
Crítica
MétricasAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions PHP version 7.1.5
Description The issue is related to the i zval ptr dtor function in Zend/zend variables.h, which allows attackers to cause a denial of service (memory consumption and application crash) or possibly have unspecified other impact by triggering crafted operations on array data structures. This can lead to memory consumption and application crash when specially crafted commands are executed on array data structures.
Recommendations For PHP version 7.1.5, consider updating to a newer version to mitigate the risk, as the current version allows for denial of service and potential other impacts due to the i zval ptr dtor function issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Explorabilidade
Exploit
Impactos
Pesquisadores
Fornecedores
Produtos afetados
Identificadores relacionados
ALT-PU-2017-1707
USN-5300-1
USN-5300-2
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾