Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
PHP Integer Overflow or Wraparound Vulnerability - CVE-2017-5340 - Vulnerability Database
PHP

PHP Integer Overflow or Wraparound Vulnerability - CVE-2017-5340

Critical
Reference: CVE-2017-5340
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2017-5340
Title: PHP Integer Overflow or Wraparound Vulnerability
Overview:

Zend/zend_hash.c in PHP before 7.0.15 and 7.1.x before 7.1.1 mishandles certain cases that require large array allocations which allows remote attackers to execute arbitrary code or cause a denial of service (integer overflow uninitialized memory access and use of arbitrary destructor function pointers) via crafted serialized data.