PT-2017-4177 · Php+2 · Php+2
Cyoung
·
Publicado
2017-07-08
·
Atualizado
2018-05-04
·
CVE-2017-12934
CVSS v2.0
7.8
Alta
| Vetor | AV:N/AC:L/Au:N/C:N/I:C/A:N |
Name of the Vulnerable Software and Affected Versions
PHP versions 7.0.x through 7.0.20
PHP versions 7.1.x through 7.1.6
Description
The issue is related to a heap use after free while unserializing untrusted data, which can have an unspecified impact on the integrity of PHP. This is due to the
zval get type function in Zend/zend types.h. Exploitation of this issue may allow a remote attacker to affect data integrity.Recommendations
For PHP versions 7.0.x through 7.0.20, update to version 7.0.21 or later.
For PHP versions 7.1.x through 7.1.6, update to version 7.1.7 or later.
Correção
Use After Free
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Php
Suse