cve.bz

CVE-2017-6441

7.5 highEPSS 1.8%

High (7.5) in php php. EPSS 1.8% chance of exploitation in the next 30 days.

The _zval_get_long_func_ex in Zend/zend_operators.c in PHP 7.1.2 allows attackers to cause a denial of service (NULL pointer dereference and application crash) via crafted use of "declare(ticks=" in a PHP script. NOTE: the vendor disputes the classification of this as a vulnerability, stating "Please do not request CVEs for ordinary bugs. CVEs are relevant for security issues only.

Severity

CVSS 3.0

7.5 high
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
1.8% chance of exploitation in the next 30 days; higher than 78% of CVEs (scores of 2026-11-01)
CWE
CWE-476
Published
Modified
Record from
the NVD, synced

Affected

References

Check your stackJSON