CVE-2017-9119 The i_zval_ptr_dtor function in Zend/zend_variables.h in PHP 7.1.5 allows attackers to cause a denial of service (memory consumption and application crash) or possibly have unspecified other impact by...
CriticalCVSS 9.8
EPSS 3.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The i_zval_ptr_dtor function in Zend/zend_variables.h in PHP 7.1.5 allows attackers to cause a denial of service (memory consumption and application crash) or possibly have unspecified other impact by triggering crafted operations on array data structures.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| PHP | = 7.1.5 | No fix listed |
| netapp clustered data ontap | All versions | No fix listed |
| netapp storage automation store | All versions | No fix listed |
References
- 98596 third-party-advisory vdb-entry
- bugs.php.net exploit issue-tracking patch vendor-advisory
- security.netapp.com third-party-advisory