Beveiligingsadvies

CVE-2017-6441

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2017-04-03 05:44:00
Laatst bijgewerkt 2024-08-05 15:25:49
Toegewezen door mitre
CVSS-score geen score
Status PUBLISHED

Beschrijving

The _zval_get_long_func_ex in Zend/zend_operators.c in PHP 7.1.2 allows attackers to cause a denial of service (NULL pointer dereference and application crash) via crafted use of "declare(ticks=" in a PHP script. NOTE: the vendor disputes the classification of this as a vulnerability, stating "Please do not request CVEs for ordinary bugs. CVEs are relevant for security issues only.