CVE-2017-5340 in PHP
Сводка (Английский)
Zend/zend_hash.c in PHP before 7.0.15 and 7.1.x before 7.1.1 mishandles certain cases that require large array allocations, which allows remote attackers to execute arbitrary code or cause a denial of service (integer overflow, uninitialized memory access, and use of arbitrary destructor function pointers) via crafted serialized data.
Резервировать
11.01.2017
Раскрытие
11.01.2017
Записи
VulDB provides additional information and datapoints for this CVE:
| ИД | Уязвимость | CWE | Экс | Кон | CVE |
|---|---|---|---|---|---|
| 95171 | PHP Serialization zend_hash.c повреждение памяти | 190 | Не определено | Официальное исправление | CVE-2017-5340 |