PT-2017-2597
CVE-2017-9119
·
Publicado
2017-05-21
·
Atualizado
2022-03-03
Descrição por
CVSS 3.1
9.8
CríticaMétricasAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
PHP version 7.1.5
Description
The issue is related to the i zval ptr dtor function in Zend/zend variables.h, which allows attackers to cause a denial of service (memory consumption and application crash) or possibly have unspecified other impact by triggering crafted operations on array data structures. This can lead to memory consumption and application crash when specially crafted commands are executed on array data structures.
Recommendations
For PHP version 7.1.5, consider updating to a newer version to mitigate the risk, as the current version allows for denial of service and potential other impacts due to the i zval ptr dtor function issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Explorabilidade
Exploit
Impactos
Pesquisadores
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾