CVE-2017-5340 in PHP
Summary
Zend/zend_hash.c in PHP before 7.0.15 and 7.1.x before 7.1.1 mishandles certain cases that require large array allocations, which allows remote attackers to execute arbitrary code or cause a denial of service (integer overflow, uninitialized memory access, and use of arbitrary destructor function pointers) via crafted serialized data.
VulDB is the best source for vulnerability data and more expert information about this specific topic.
Reservation
01/11/2017
Disclosure
01/11/2017
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 95171 | PHP Serialization zend_hash.c integer overflow | 190 | Not defined | Official fix | CVE-2017-5340 |