CVE-2017-9119

Critical

Published: 21/05/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

The i_zval_ptr_dtor function in Zend/zend_variables.h in PHP 7.1.5 allows attackers to cause a denial of service (memory consumption and application crash) by triggering crafted operations on array data structures.

Risk Assessment

Attackers can exploit this vulnerability to disrupt application functionality, potentially leading to downtime and loss of service availability.

Recommendation

It is recommended to update PHP to the latest version to mitigate this vulnerability and to monitor applications for unusual memory consumption.

Original NVD description (English source)

The i_zval_ptr_dtor function in Zend/zend_variables.h in PHP 7.1.5 allows attackers to cause a denial of service (memory consumption and application crash) or possibly have unspecified other impact by triggering crafted operations on array data structures.