Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2017-5340

Zend/zend_hash.c in PHP before 7.0.15 and 7.1.x before 7.1.1 mishandles certain cases that require large array allocations, which allows remote attackers to execute arbitrary code or cause a denial of service (integer overflow, uninitialized memory access, and use of arbitrary destructor function pointers) via crafted serialized data.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.113
EPSS Ranking 93.2%
CVSS Severity
CVSS v3 Score 9.8
CVSS v2 Score 7.5
Products affected by CVE-2017-5340
  • Netapp » Clustered Data Ontap » Version: N/A
    cpe:2.3:a:netapp:clustered_data_ontap:-
  • Php » Php » Version: 7.0.0
    cpe:2.3:a:php:php:7.0.0
  • Php » Php » Version: 7.0.1
    cpe:2.3:a:php:php:7.0.1
  • Php » Php » Version: 7.0.10
    cpe:2.3:a:php:php:7.0.10
  • Php » Php » Version: 7.0.11
    cpe:2.3:a:php:php:7.0.11
  • Php » Php » Version: 7.0.12
    cpe:2.3:a:php:php:7.0.12
  • Php » Php » Version: 7.0.13
    cpe:2.3:a:php:php:7.0.13
  • Php » Php » Version: 7.0.14
    cpe:2.3:a:php:php:7.0.14
  • Php » Php » Version: 7.0.2
    cpe:2.3:a:php:php:7.0.2
  • Php » Php » Version: 7.0.3
    cpe:2.3:a:php:php:7.0.3
  • Php » Php » Version: 7.0.4
    cpe:2.3:a:php:php:7.0.4
  • Php » Php » Version: 7.0.5
    cpe:2.3:a:php:php:7.0.5
  • Php » Php » Version: 7.0.6
    cpe:2.3:a:php:php:7.0.6
  • Php » Php » Version: 7.0.7
    cpe:2.3:a:php:php:7.0.7
  • Php » Php » Version: 7.0.8
    cpe:2.3:a:php:php:7.0.8
  • Php » Php » Version: 7.0.9
    cpe:2.3:a:php:php:7.0.9
  • Php » Php » Version: 7.1.0
    cpe:2.3:a:php:php:7.1.0


Products
Pricing
Contact Us

Shodan ® - All rights reserved