zend_hash_del_key_or_index in zend_hash.c in PHP before 4.4.3 and 5.x before 5.1.3 can cause zend_hash_del to delete the wrong element, which prevents a variable from being unset even when the PHP unset function is called, which might cause the variable's value to be used in security-relevant operations.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Php | — | Upgrade to PHP version 5.1.3Upgrade to PHP version 4.4.3 | Oct 1, 2012 | Jun 14, 2006 |
| Ubuntu | — | Upgrade php5-curlUpgrade php5-cgiUpgrade libapache2-mod-php5Upgrade php5-cliUpgrade php4-cgiUpgrade libapache2-mod-php4Upgrade php4-cli | Nov 8, 2024 | Jun 14, 2006 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub