What’s Vulnerable › Vulnerabilities

CVE-2017-9119

• Severity: critical (CVSS 9.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 3.6% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2017-05-21 · updated 2026-06-17
• Weakness: CWE-400

Description

The i_zval_ptr_dtor function in Zend/zend_variables.h in PHP 7.1.5 allows attackers to cause a denial of service (memory consumption and application crash) or possibly have unspecified other impact by triggering crafted operations on array data structures.

Affected products

• Clustered Data ONTAP: all versions
• NetApp Storage Automation Store: all versions
• PHP: 7.1.5

References

• http://www.securityfocus.com/bid/98596
• https://bugs.php.net/bug.php?id=74593
• https://security.netapp.com/advisory/ntap-20180112-0001/
• http://www.securityfocus.com/bid/98596
• https://bugs.php.net/bug.php?id=74593
• https://security.netapp.com/advisory/ntap-20180112-0001/

Get alerted when CVE-2017-9119 or the next vulnerability affects your stack