Zend/zend_hash.c in PHP before 7.0.15 and 7.1.x before 7.1.1 mishandles certain cases that require large array allocations, which allows remote attackers to execute arbitrary code or cause a denial of service (integer overflow, uninitialized memory access, and use of arbitrary destructor function pointers) via crafted serialized data.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2017-01-11T06:02:00
Updated: 2024-08-05T14:55:35.744Z
Reserved: 2017-01-11T00:00:00
Link: CVE-2017-5340
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2017-01-11T06:59:00.160
Modified: 2022-07-20T16:46:08.717
Link: CVE-2017-5340
Redhat