CVE-2017-9119: Critical severity PHP PHP vulnerability
Last updated 24 July 2024
Other sources
The izvalptrdtor function in Zend/zendvariables.h in PHP 7.1.5 allows attackers to cause a denial of service (memory consumption and application crash) or possibly have unspecified other impact by triggering crafted operations on array data structures.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2017-9119?
CVE-2017-9119 is a vulnerability in PHP 7.1.5 that allows attackers to cause a denial of service or possibly have other impact by triggering crafted operations on array data structures.
What is the severity of CVE-2017-9119?
CVE-2017-9119 has a severity rating of 9.8 (Critical).
Which software versions are affected by CVE-2017-9119?
PHP 7.1.5 is affected by CVE-2017-9119. The NetApp Clustered Data ONTAP and Netapp Storage Automation Store are also affected.
How can CVE-2017-9119 be exploited?
CVE-2017-9119 can be exploited by triggering crafted operations on array data structures.
Where can I find more information about CVE-2017-9119?
More information about CVE-2017-9119 can be found at the following references: [CVE Mitre](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9119), [Ubuntu Security Notice 1](https://ubuntu.com/security/notices/USN-5300-1), [Ubuntu Security Notice 2](https://ubuntu.com/security/notices/USN-5300-2).