CVE-2017-5340

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Zend/zend_hash.c in PHP before 7.0.15 and 7.1.x before 7.1.1 mishandles certain cases that require large array allocations, which allows remote attackers to execute arbitrary code or cause a denial of service (integer overflow, uninitialized memory access, and use of arbitrary destructor function pointers) via crafted serialized data.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-190

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.securityfocus.com/bid/95371Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1037659Third Party Advisory, VDB Entry
https://access.redhat.com/errata/RHSA-2018:1296Third Party Advisory
https://bugs.php.net/bug.php?id=73832Exploit, Issue Tracking, VDB Entry, Vendor Advisory
https://github.com/php/php-src/commit/4cc0286f2f3780abc6084bcdae5dce595daa3c12Patch, Third Party Advisory
https://security.netapp.com/advisory/ntap-20180112-0001/Third Party Advisory
http://www.securityfocus.com/bid/95371Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1037659Third Party Advisory, VDB Entry
https://access.redhat.com/errata/RHSA-2018:1296Third Party Advisory
https://bugs.php.net/bug.php?id=73832Exploit, Issue Tracking, VDB Entry, Vendor Advisory
https://github.com/php/php-src/commit/4cc0286f2f3780abc6084bcdae5dce595daa3c12Patch, Third Party Advisory
https://security.netapp.com/advisory/ntap-20180112-0001/Third Party Advisory

Timeline

Published: Jan 11, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-53419.8The OTV parser in tcpdump before 4.9.0 has a buffer overflow in print-otv.c:otv_print().CVE-2017-53429.8In tcpdump before 4.9.0, a bug in multiple protocol parsers (Geneve, GRE, NSH, OTV, VXLAN and VXLAN GPE) could cause a buffer overflow in pr CVE-2017-53449.8An issue was discovered in dotCMS through 3.6.1. The findChildrenByFilter() function which is called by the web accessible path /categoriesS CVE-2017-53458.8SQL injection vulnerability in inc/lib/Control/Ajax/tags-ajax.control.php in GeniXCMS 0.0.8 allows remote authenticated editors to execute a CVE-2017-53467.2SQL injection vulnerability in inc/lib/Control/Backend/posts.control.php in GeniXCMS 0.0.8 allows remote authenticated administrators to exe CVE-2017-53477.2SQL injection vulnerability in inc/mod/newsletter/options.php in GeniXCMS 0.0.8 allows remote authenticated administrators to execute arbitr CVE-2017-53507.5Samsung Note devices with L(5.0/5.1), M(6.0), and N(7.0) software allow attackers to crash systemUI by leveraging incomplete exception handl CVE-2017-53517.5Samsung Note devices with KK(4.4), L(5.0/5.1), and M(6.0) software allow attackers to crash the system by creating an arbitrarily large numb CVE-2017-53567.5Irssi before 0.8.21 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a string containing a formatting CVE-2017-53577.5regex.c in GNU ed before 1.14.1 allows attackers to cause a denial of service (crash) via a malformed command, which triggers an invalid fre CVE-2017-53589.8Stack-based buffer overflows in php_Easycom5_3_0.dll in EasyCom for PHP 4.0.0.29 allows remote attackers to execute arbitrary code via the s CVE-2017-53597.5EasyCom SQL iPlug allows remote attackers to cause a denial of service via the D$EVAL parameter to the default URI.