CVE-2017-5340 in PHP

Resumen (Inglés)

Zend/zend_hash.c in PHP before 7.0.15 and 7.1.x before 7.1.1 mishandles certain cases that require large array allocations, which allows remote attackers to execute arbitrary code or cause a denial of service (integer overflow, uninitialized memory access, and use of arbitrary destructor function pointers) via crafted serialized data.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Reservar

2017-01-11

Divulgación

2017-01-11

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
95171	PHP Serialization zend_hash.c desbordamiento de búfer	190	No está definido	Arreglo oficial	CVE-2017-5340

Fuentes

• MITRE
• NVD
• CVE Details